Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 2 subscribers
  • Views 3544 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Alfresco & ASG 8.202

Fir3wall
I tried to configure my Astaro ASG 8.202 to permit web access to my Alfresco CMS server with no success!!!!!
The service is accessible trough port 8443 (SSL).

In the image below my firewall and Nat config 

This is what I get from firewall log:

/var/log/packetfilter/2011/11/packetfilter-2011-11-29.log.gz:2011:11:29-09:14:18 ****** ulogd[5600]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="0:c:29:XX:XX:XX" dstmac="0:50:XX:XX:XX" srcip="192.168.1.35" dstip="XX.18.194.XX" proto="6" length="1470" tos="0x00" prec="0x00" ttl="63" srcport="8443" dstport="52421" tcpflags="ACK"
/var/log/packetfilter/2011/11/packetfilter-2011-11-29.log.gz:2011:11:29-09:15:11 ****** ulogd[5600]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth1" srcmac="0:1f:33:XX:XX:XX" dstmac="0:c:29:XX:XX:XX" srcip="XX.18.194.XX" dstip="XX.37.150.XX" proto="6" length="40" tos="0x00" prec="0x00" ttl="105" srcport="52421" dstport="8443" tcpflags="ACK RST"

I don't understand why I get a dropped packet if the rule permit 8443 packet in/out.

Any idea?

Regards
Alex


This thread was automatically locked due to age.
Parents
  • 0
    The IPS log also records Flooding, so look there even if IPS is not enabled.  The Firewall log indicates that the user's request is being sent to the server. 

    Cheers - Bob

    Sorry for any short responses!  Posted from my iPhone.
Reply
  • 0
    The IPS log also records Flooding, so look there even if IPS is not enabled.  The Firewall log indicates that the user's request is being sent to the server. 

    Cheers - Bob

    Sorry for any short responses!  Posted from my iPhone.
Children