Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 2 subscribers
  • Views 9260 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall rule not working

tuscani
Hello, we have a firewall rule in position 2 that allows two external IPs (they are in a network group) Any/Any access to the internal LAN. The external IPs are VOIP providers that use upper level UDP Ports. Yet the firewall is still dropping the packets. Any idea why? 

The firewall rule in postion 1 is Any\Any\Any but is disabled.

2013:04:17-13:33:42 @ ulogd[4267]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth1" srcmac="b8:9b:c9[:D]9:55:ba" dstmac="0:1a:8c:13:61:31" srcip="x.x.x.x" dstip="y.y.y.y" proto="17" length="132" tos="0x00" prec="0x20" ttl="117" srcport="26055" dstport="2108"


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to tuscani
    Ok I will try that.. but I am still curious why the firewall drops the packet.. is it because it doesn't know where to route it?


    All traffic is dropped unless there is a matching firewall rule to allow it.

    Your firewall rule would work with a DNAT, but since you have multiple phones, a DNAT will not solve your problems.

    Barry
  • 0 in reply to BarryG
    Got it.. I enabled\configured VOIP options on the 120.. will let you know how it goes. [:)]
  • 0 in reply to tuscani
    Enabling the SIP and H323 on the UTM120 didn't make a difference.. still seeign the drops on the firewall. VOIP vender stated it shouldn't matter if these ports a blocked.. so I guess I won't worry about it. [:)]