This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Configured port shows no outgoing traffic

Hi,

I am trying to setup port forwarding for port 8085 to a specific server.

I have created a Packet Filter rule as below;
Source : Any
Service : Port 8085
Destination : Server A
Action : Allow

I have also created a DNAT rule as below;
Traffic Source : Any
Traffic Service : Port 8085
Traffic Destination : Leased Line (Address)
NAT Mode : DNAT
Destination : Server A
Log Initial Packets : Ticked
Automatic Packet Filter Rule : Not Ticked

I can see from the Packet Filter Live Log that packets are green and are being allowed to Server A, but I can also see from Network Usage Accounting that 0 packets are going out for that port.

Please can someone help as this is driving me mad.

Regards,
Mark.

This thread was automatically locked due to age.

0 dilandau over 14 years ago

Hi, the rules look correct. In most cases when this doesn't work it's an issue with the server dropping the traffic or not having the proper route. Is the astaro the default gateway for Server A?

I would suggest to ssh into the astaro and use tcpdump, then you can verify if traffic is being forwarded correctly and if Server A is responding.
Cancel
Vote Up 0 Vote Down

Cancel
0 mactag over 14 years ago in reply to dilandau

Hi,

Thanks for the response.

Server A has a default gateway of the Layer 3 switch. The Astaro's internal address is on a different subnet to Server A. We use the Astaro as the proxy server.

How do you ssh into the Astaro?

Mark.
Cancel
Vote Up 0 Vote Down

Cancel
0 Billybob over 14 years ago in reply to mactag

Your DNAT configuration is correct but as dilandau pointed out, you need to make an access rule for the server to reach outside.

A packet filter rule like
Server A ->Port 8085-> Destination ANY allow.

You should be seeing this in your packet filter log where the traffic is being dropped with default drop rule.
Cancel
Vote Up 0 Vote Down

Cancel
0 dilandau over 14 years ago in reply to mactag

How do you ssh into the Astaro?

ssh instructions
https://support.astaro.com/support/index.php/Change_SSH_and_root_passwords_and_login_to_SSH

If the switch is the gateway for the server I would check to see if it has the proper routes to send the reply traffic back to the astaro.
Cancel
Vote Up 0 Vote Down

Cancel