Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 797 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Any

utm_kid
Hi !

Dear friends ,

while creating firewall rule (packet filter) ,when/why source internal network doesn't work ,you have to use very spcific compuer/ip from where you are   connection  ,for ex i tryed to acess another astaro box (asg 120 at office ) over internet but was dropping (default drop) packet but when i add computer ip (192.168.1.105) it work ,why(why any didnt work ), my internal network in (192.168.1.96/28)

in which  situation we should use initiating ip only ?

Thanks


This thread was automatically locked due to age.
Parents
  • 0
    Are you accessing the ASG120 via a VPN?

    Show the packet filter rule and any "Network Definition" used that you made.

    Show the line from the packet filter log where the packet was dropped.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Are you accessing the ASG120 via a VPN?

    Show the packet filter rule and any "Network Definition" used that you made.

    Show the line from the packet filter log where the packet was dropped.


    No i am not trying over vpn /trying over internet !still trying to do that ,i have mis-configure it ,and want to fix it !

    log i will create again i usually  delete log very frequently 

    Bob can you pleae tell me is it possible or its my wrong understanding/configuration 

    Thanks
  • 0 in reply to utm_kid
    From the outside, you would access the Astaro at https://[yourdomain-as-you-told-me].dyndns.info:4444/.

    First, you must have a host (or network) defined in the Astaro with the Public IP(s) from your office.  That definition needs to be in 'Allowed networks' on the 'Access Control' tab of 'Management >> WebAdmin'.

    Cheers - Bob
    PS All addresses within 192.168.x.x are local addresses and not visible from the internet.  It's a big no-no to have a private address connected to the public internet.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to utm_kid
    From the outside, you would access the Astaro at https://[yourdomain-as-you-told-me].dyndns.info:4444/.

    First, you must have a host (or network) defined in the Astaro with the Public IP(s) from your office.  That definition needs to be in 'Allowed networks' on the 'Access Control' tab of 'Management >> WebAdmin'.

    Cheers - Bob
    PS All addresses within 192.168.x.x are local addresses and not visible from the internet.  It's a big no-no to have a private address connected to the public internet.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson
    From the outside, you would access the Astaro at https://[your domain as you told me].dyndns.info:4444/.

    First, you must have a host (or network) defined in the Astaro with the Public IP(s) from your office.  Theat definition needs to be in 'Allowed networks' on the 'Access Control' tab of 'Management >> WebAdmin'.

    Cheers - Bob
    PS All addresses within 192.168.x.x are local addresses and not visible from the internet.  It's a big no-no to have a private address connected to the public internet.


    Yes Sir ,
    understood 
    i will try to get what/where mistake i was doing 

    Thanks