This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is this bad?

The only way I can get Astaro to let me on the internet is if I make the packet filter "Any > Any > Any". Is that unsafe?


This thread was automatically locked due to age.
Parents Reply Children
  • It's hard to say without seeing the configuration... some things to check:

    1) are you using http proxy? If so, make sure the DNS setup on the Astaro points at valid forwarders--in fact, make sure they're valid anyway.
    2) Make sure you clients have correct IP addresses (on the same subnet with the internal interface on the Astaro .. you do have more than one NIC, right?) and correct subnet mask, gateway, and DNS settings (normally one would point the DNS of clients at the AStaro, or, if you have an internal server, point it at them).
    3) If you need access other than web browsing (or you have HTTP Proxy disabled), make sure you have proper NAT (Masquerading) rule(s) defined, along with proper packet filters.  Astaro (as many other security devices are set as well) is a default-deny firewall...

    Check out the manual as well...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.