This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Accessing the internet without a Proxy

Hi,

I just upgraded to v7.1 from v6

I want to access the internet without a proxy. I have NAT on and rules in the packet filter. Still can't access the internet. If I turn the proxy on, it works. Does anyone know what is going on or how to get this to work in V7?

Thanks for the help.......

This thread was automatically locked due to age.

Parents

0 hobycat over 17 years ago

build a top PF rule Internal network>ANY>ANY
try to browse. If it works, you know it's a PF rule blocking traffic.
Then review your packet filter rules.
Remeber the PF rules are processed from top to bottom, so while you may have the correct rules in place. you may have an earlier rule blocking!

Alos, you said NAT rule in place..
You need a masq rule, not a nat rule
internal network>external interface.
Cancel
Vote Up 0 Vote Down

Cancel
0 iso over 17 years ago in reply to hobycat

Thanks for the reply.

The first thing I did was to build an internal net ---> ANY rule on top.

And my NAT rule is a masq rule.

Works great in V6 but it doesn't work in V7. Something else must have changed in V7.

Any other ideas?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 ClausP over 17 years ago in reply to iso

Correct DNS settings ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Mike_H over 17 years ago in reply to ClausP

I'm with ClausP on this

Sounds like you have not setup your DNS yet or PF is blocking it
Cancel
Vote Up 0 Vote Down

Cancel
0 JuergenH over 17 years ago in reply to Mike_H

Hi.

It may be another problem (too).
If the http proxy is active the ASG does not interpret the DNAT/SNAT rules for port 80.
Is it possible that there are also NAT rules active which interfere now?

regards Juergen
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 JuergenH over 17 years ago in reply to Mike_H

Hi.

It may be another problem (too).
If the http proxy is active the ASG does not interpret the DNAT/SNAT rules for port 80.
Is it possible that there are also NAT rules active which interfere now?

regards Juergen
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 iso over 17 years ago in reply to JuergenH

I would agree that it sounds like something (DNS or PF rule) is not setup correctly. I have been over everything and it looks good. Also I have the same settings in V6 and it works fine. Looks like I will go back to V6 for the time being.

Thanks for the help.....
Cancel
Vote Up 0 Vote Down

Cancel