This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

7.1 Update - Outgoing Traffic Problem

franky1974 over 18 years ago

I have updated to 7.1 from 7.011. After the update, i started having problems with outgoing email. Blackberry server is not communicating SRP. Nothing has changed since upgrade. What could it go wrong?

We have internet connection, but pinging is not working anymore.

Any help would be appreciated.

This thread was automatically locked due to age.

Parents

0 franky1974 over 18 years ago

To make it clearer, pinging internet addresses does not work anymore.
Cancel
Vote Up 0 Vote Down

Cancel
0 franky1974 over 18 years ago in reply to franky1974

I have ASG320 and if nothing works, I am willing to rebuild it with 7.011 because I have a backup file for 7.011. If anyone has no idea, instructions to resbuild ASG320 with 7.011 iso file would be helpful.
Cancel
Vote Up 0 Vote Down

Cancel
0 franky1974 over 18 years ago in reply to Keith_M

1) Yes. I restored the setting that I know it worked before.
2) Yes the firewall can ping internal address
3) Yes I can ping the external address of the firewall
4) No I cannot ping the internal address of the router from inside and firewall.
5) I cannot ping the external address of the router from inside, but firewall can ping it.
6) No from inside and Yes from firewall.
Cancel
Vote Up 0 Vote Down

Cancel
0 Keith_M over 18 years ago in reply to franky1974

Remove your masquarade rule and recreate it
Cancel
Vote Up 0 Vote Down

Cancel
0 franky1974 over 18 years ago in reply to Keith_M

Just did. Recreated "Internal (Network) -> External". Still not working...
Cancel
Vote Up 0 Vote Down

Cancel
0 Keith_M over 18 years ago in reply to franky1974

create an any any out rule. tun on logging
open the live packet log and try to telnet to something using port 110 or something and see if it shows up in the log.
Cancel
Vote Up 0 Vote Down

Cancel
0 Keith_M over 18 years ago in reply to franky1974

- we know the interface works because you can ping from the firewall correct. It has to be a masq rule or packet filter rule. Unless some goofy static route is applied.
Cancel
Vote Up 0 Vote Down

Cancel
0 franky1974 over 18 years ago in reply to Keith_M

This is what i got. I tried to telnet to port 3101.

10:18:28 Packetfilter rule #1 TCP 10.100.1.30 : 3922
→ 206.51.26.33 : 3101
[SYN] len=48 ttl=126 tos=0x00 srcmac=00:17:5a:bd:47:7f dstmac=00:10:f3:0b:42:95
Cancel
Vote Up 0 Vote Down

Cancel
0 franky1974 over 18 years ago in reply to franky1974

I could not connect to port 3101 though. Computers outside the firewall can connect using that port.
Cancel
Vote Up 0 Vote Down

Cancel
0 Keith_M over 18 years ago in reply to Keith_M

only 1 default gateway on the firewall correct
Cancel
Vote Up 0 Vote Down

Cancel
0 franky1974 over 18 years ago in reply to Keith_M

I am totally puzzled. The masq rule did not change since we got the appliance, and the packet filter rule did not change either. I have the following packet filter:

Internal (Network) -> (Any) -> Any
Any -> (RDP) -> Any
SSL VPN -> (Any) -> Any
Any -> (SMTP) -> MailServer
Any -> (Any) -> Internal (Broadcast)
Any -> (Any) -> Phone System
Any -> (HTTPS) -> MailServer
Any -> (Citrix1) -> Citrix Server
Any -> (Citrix2) -> Citrix Server
Cancel
Vote Up 0 Vote Down

Cancel
0 Keith_M over 18 years ago in reply to franky1974

ok - so you can get to the firewall. has to be nat or route. Stupid question. You have reset the firewall right?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Keith_M over 18 years ago in reply to franky1974

ok - so you can get to the firewall. has to be nat or route. Stupid question. You have reset the firewall right?
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data