This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Dropping STUN requests

I currently have an 8.0 Essenetials server running in a small network. I am having trouble with STUN requests that are being made to a server outside our network. All of the UDP traffic seems to get getting dropped and I am not sure why unless I guess the Astaro NAT is Symmetric?

08:53:43 Default DROP UDP 10.10.10.198 : 52949
→ (External IP) : 53455
len=180 ttl=128 tos=0x00 srcmac=0:21:5a:1c:6a:59 dstmac=0:1d:60[:D]1:40:6d

It is blocking the UDP traffic both incoming and outgoing.

Is there any kind of Packet Filter or other setting I need in place to allow STUN to work over the Astaro? I created an Any -> Any -> Any Packetfilter and the traffic was still being dropped. I feel like I am just missing something somewhere.

Thanks,

Dave

This thread was automatically locked due to age.

0 BarryG over 14 years ago

Hi, you should never use an ANY ANY ANY PF rule; you're opening your entire network to the internet.

A rule such as
source: LAN
Dest: ANY
service: ANY

would be much safer

Have you setup Masquerading already for your LAN(s)? (to the EXT interface)

Barry
Cancel
Vote Up 0 Vote Down

Cancel