Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 2 subscribers
  • Views 9266 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall rule not working

tuscani
Hello, we have a firewall rule in position 2 that allows two external IPs (they are in a network group) Any/Any access to the internal LAN. The external IPs are VOIP providers that use upper level UDP Ports. Yet the firewall is still dropping the packets. Any idea why? 

The firewall rule in postion 1 is Any\Any\Any but is disabled.

2013:04:17-13:33:42 @ ulogd[4267]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth1" srcmac="b8:9b:c9[:D]9:55:ba" dstmac="0:1a:8c:13:61:31" srcip="x.x.x.x" dstip="y.y.y.y" proto="17" length="132" tos="0x00" prec="0x20" ttl="117" srcport="26055" dstport="2108"


This thread was automatically locked due to age.
Parents
  • 0
    Ok I will try that.. but I am still curious why the firewall drops the packet.. is it because it doesn't know where to route it?
  • 0 in reply to tuscani
    Ok I will try that.. but I am still curious why the firewall drops the packet.. is it because it doesn't know where to route it?


    All traffic is dropped unless there is a matching firewall rule to allow it.

    Your firewall rule would work with a DNAT, but since you have multiple phones, a DNAT will not solve your problems.

    Barry
Reply
  • 0 in reply to tuscani
    Ok I will try that.. but I am still curious why the firewall drops the packet.. is it because it doesn't know where to route it?


    All traffic is dropped unless there is a matching firewall rule to allow it.

    Your firewall rule would work with a DNAT, but since you have multiple phones, a DNAT will not solve your problems.

    Barry
Children