Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 654 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Routing problem

Thierry D'AMBROSIO
Hi, i've a problem with routing
My configuration has two asl firewalls interconnected 

 Internet  DMZ
   !        !
   !        !
   !        !
!--------------!192.168.100.x    !-------------!
!              x-----------------x             !
!--------------!    192.168.100.y!-------------!
  !         !                              !
  !         !                              !
  !         !                              !
Lan 1       !                              !
192.168.1.x !                             Lan 3
            !                         10.254.254.x
         Lan 2
         192.168.2.x

From Lan 3, i can ping a host in Lan 1 or Lan 2, but from a host in Lan 1 or Lan 2 i can't ping a host in Lan 3, i can only ping the adress 10.254.254.n from the attached fw.

Thanks


This thread was automatically locked due to age.
  • 0
    Thierry,

    you are a real ASCII artist :-)

    Sounds for me if the spoof protection mechanism
    blocks your traffic. Open PacketFilterLiveLog
    and check it. Am I right? O.K. now make sure 
    that you plugged all NICs into different devices
    and that there are no network loops.

    Spoof protection takes place if the firewall reads
    packets from the left network on the right NIC for
    example.

    Hope this was understandable :-)
    ollion
  • 0 in reply to ollion
    quote:
    Originally posted by ollion:
    Thierry,

    you are a real ASCII artist :-)

    Sounds for me if the spoof protection mechanism
    blocks your traffic. Open PacketFilterLiveLog
    and check it. Am I right? O.K. now make sure 
    that you plugged all NICs into different devices
    and that there are no network loops.

    Spoof protection takes place if the firewall reads
    packets from the left network on the right NIC for
    example.

    Hope this was understandable :-)
    ollion
Unfiltered HTML