This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IP-level functions work, but can't access system!

My firewall has all the latest patches, and it's constantly doing this! The system will forward packets just fine, but when I try to access webadmin or SSH, the system won't answer me! I have to reboot to get it back, then after a day or so, it's back that way again. I had the SOCKS proxy turned on, and some basic NAT rules, but that's about it. Any help would be most appreciated!!
Thanks!

This thread was automatically locked due to age.

Parents

0 dada over 21 years ago

I have this problem too. It is just a little bit difficulter. On one box it is the same behavour like mentioned above. But on one box the NIC is only reachable (it seems to be down on the TCP Layer) with ping and all services like webadmin or http proxy are not reachable until reboot.
By the way - socks proxy is not running on my boxes.
Can anyone help me - it is not very funny to reboot a firewall evry day!
Cancel
Vote Up 0 Vote Down

Cancel
0 SecApp over 21 years ago in reply to dada

In answer to dada:

Using DHCP somewhere?

Made sure there is not an IP address on your LAN that is the same as the firewall?
Cancel
Vote Up 0 Vote Down

Cancel
0 dada over 21 years ago in reply to SecApp

No, there is not a dhcpd within this network.
Cancel
Vote Up 0 Vote Down

Cancel
0 SecApp over 21 years ago in reply to dada

Is your gateway of the workstation on the Internal network set to Astaro? Is there no gateway on the Internal firewall interface? (as there should not be in this version...)
Cancel
Vote Up 0 Vote Down

Cancel
0 dada over 21 years ago in reply to SecApp

Yes all network settings are in that manner they should be.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 dada over 21 years ago in reply to SecApp

Yes all network settings are in that manner they should be.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 SecApp over 21 years ago in reply to dada

Can you get to the webadmin from the external interface (i.e., the Internet)? Anything in the logs??
Cancel
Vote Up 0 Vote Down

Cancel
0 mitsa over 21 years ago in reply to SecApp

Hi,

I just experienced the same problem a couple of days ago for the first time. I'm on version 4.0.18. I was in the middle of adding in a service definition through WebAdmin from a remote location (which means I was connected through the external interface), and all of a sudden I couldn't get to WebAdmin anymore. So I tried SSH, and no luck there either.

Later, I tried accessing both WebAdmin and SSH from the internal LAN and no luck there either. The I pinged the firewall and it responded. So I connected to WebAdmin and was able to get on, but still could not connect from the remote site. So I rebooted. After the reboot, I tried SSH and got in. So I closed it, and tried WebAdmin, and it didn't work again! So I tried SSH again (remotely), and it wouldn't connect anymore. Also, when I'm having the problem, none of my DNATs work either. HELP!!!!!! (please)

The only proxy I have turned on is the DNS proxy, and it's been set up like this since version 2.?. I have just four workstations that have static DHCP reservations configured. I'm using Masquerading, and have about 5 DNAT rules defined. That's it. A very simple configuration.
Cancel
Vote Up 0 Vote Down

Cancel