This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Had access to internal web portal working...

Hi all,

I have an internal secure web portal (https) and was able to access from the Internet and now it doesn't seem to work anymore....[:S] I've attached a DNAT for your viewing. Live log of packet filter is showing a "pass" using the correct packet filter rule. Any suggestion on what I'm doing wrong?

Thanks

This thread was automatically locked due to age.

0 dknyinva over 15 years ago

anyone with any suggestions?
Cancel
Vote Up 0 Vote Down

Cancel
0 trollvottel over 15 years ago

The automatic packet filter option is disabled. You have to manually create a matching packet filter expection or enable the auto-packetfilter option for the DNAT rule.
Cancel
Vote Up 0 Vote Down

Cancel
0 dknyinva over 15 years ago in reply to trollvottel

Hi Mario,

I already have a matching packet rule setup. I've attached the packet rule and the log for your viewing. It's showing traffic is passing, but failed to connect.

Thanks for replying,
Cancel
Vote Up 0 Vote Down

Cancel
0 dknyinva over 15 years ago in reply to dknyinva

I've gone to Home of Gibson Research Corporation and probing the service port. It's showing 443 as being stealth. I don't know why?

The only changed I made was going from putting Ooma VoIP in front of ASG and to putting Ooma behind my ASG. Only changed made was creating DNAT rule for Ooma VoIP outbound port traffic.

Any additional help is greatly appreciated.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 15 years ago

Hi, since the PF log shows the traffic entering your network, you should check the server to make sure there's no firewall on it.

Running a sniffer might help too.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 dknyinva over 15 years ago in reply to BarryG

That damn Windows FW!!!! Turn it off and voila!

Thanks Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 trollvottel over 15 years ago

Please also make sure you don't have activated the User Portal or SSL-VPN at TCP Port 443 ;-)
Cancel
Vote Up 0 Vote Down

Cancel