Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 529 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Newbie question to routing and services

RalfM
Maybe someone can answer this (newbie) question.
I want to setup the following situation:
An internal client (WinNT4,static IP, no gateway defined) should connect over the FW to a specific host and port in the internet.
The client has an additional entry in the routing table like: route add external_specific_IP mask 255.255.255.0 firewall_ip
In Astaro I have defined the clients IP as host, the external specific host and the external hosts service (6666). A static route was created: internal_host, external_host, allow.  A packet filter rule was created: internal_host, service6666, external_host, allow.

After all, the external host ca not be reached from the client, neither by pinging or tcp connect to the specified dest_port.

What am I doing wrong here?

Regards, Ralf  


This thread was automatically locked due to age.
Parents
  • 0
    >>A packet filter rule was created: internal_host, service6666, external_host, allow.

    This should probably be internal_host, external_host, service6666, as you want to restrict the connection *to* that port, rather than from it.

    >>After all, the external host ca not be reached from the client, neither by pinging or tcp connect to the specified dest_port.

    You'll need an additional rule to allow the ping (icmp) traffic if you want to ping.

    Cheers,

    Karl 
Reply
  • 0
    >>A packet filter rule was created: internal_host, service6666, external_host, allow.

    This should probably be internal_host, external_host, service6666, as you want to restrict the connection *to* that port, rather than from it.

    >>After all, the external host ca not be reached from the client, neither by pinging or tcp connect to the specified dest_port.

    You'll need an additional rule to allow the ping (icmp) traffic if you want to ping.

    Cheers,

    Karl 
Children
No Data