This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Close Ports 25/80/81/82/83/110/1080/5190/8080

Hi,
i set up a Astaro V4 with. Here is my configuration.

1. NIC : 192.168.130.1 inet_interface (Gate: 192.168.130.254)

2. NIC : 10.20.30.1 wlanap_interface(Gate: none)

WLANClient(10.20.30.241/Dial up VPN on 10.20.30.254  he gets IP from the Pool )-------WLAN AP(10.20.30.250)------2.NIC(10.20.30.254 PPTP Enable(IP POOL 10.130.122.0)) (NAT Rule: PPTP Internet   PPTP-Pool -> All / All  MASQ__inet   None
Packet Filter: PPTP-Pool Any inet_Network_  Allow )-----1 NIC (192.168.130.1)-----Router(192.168.130.254)---Internet

So the client get Internet access over WlanPtPP this works fine but when i scan the 2NIC (from 10.20.30.241) these Ports are open 25/80/81/82/83/110/1080/5190/8080. I disable ICMP on firewall and want to add Packet Rules that 2te NIC only respond when he gets an VPN PtPP  request. But this dosen´t work also when i add the Rule:
wlanap_network Any wlanap_interface Any.

Thanks for help

This thread was automatically locked due to age.

0 bergy over 21 years ago

looks like you have all the proxies turned on so the ports show open for the allowed networks.
Cancel
Vote Up 0 Vote Down

Cancel
0 laslo over 21 years ago in reply to bergy

thanks for your reply.
First i think the same as you but when i checked the proxies none of them turned on. So i am confused. The Packet Rule "ANY ANY ANY ANY Drop" has also no consequences for the prot scan.
Cancel
Vote Up 0 Vote Down

Cancel
0 firebear_01 over 21 years ago in reply to laslo

Hi,
try " any -> any -> 2te nic -> drop " in some cases this may help.

firebear
Cancel
Vote Up 0 Vote Down

Cancel
0 laslo over 21 years ago in reply to firebear_01

thanks for your help the Rule "Any-> Any-> 2te nic_network->drop" works fine.
The Roadwarrior Access also is working fine without adding any more Rules.

These are my Rules
PPTP-Pool ->Any-> inet_Network-> Allow
Any-> Any-> 2te nic_network->drop

Thanks

laslo
Cancel
Vote Up 0 Vote Down

Cancel