This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall rule not working

Hello, we have a firewall rule in position 2 that allows two external IPs (they are in a network group) Any/Any access to the internal LAN. The external IPs are VOIP providers that use upper level UDP Ports. Yet the firewall is still dropping the packets. Any idea why?

The firewall rule in postion 1 is Any\Any\Any but is disabled.

2013:04:17-13:33:42 @ ulogd[4267]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth1" srcmac="b8:9b:c9[:D]9:55:ba" dstmac="0:1a:8c:13:61:31" srcip="x.x.x.x" dstip="y.y.y.y" proto="17" length="132" tos="0x00" prec="0x20" ttl="117" srcport="26055" dstport="2108"

This thread was automatically locked due to age.

Parents

0 tuscani over 12 years ago

Ok I will try that.. but I am still curious why the firewall drops the packet.. is it because it doesn't know where to route it?
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 12 years ago in reply to tuscani

Ok I will try that.. but I am still curious why the firewall drops the packet.. is it because it doesn't know where to route it?

All traffic is dropped unless there is a matching firewall rule to allow it.

Your firewall rule would work with a DNAT, but since you have multiple phones, a DNAT will not solve your problems.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 tuscani over 12 years ago in reply to BarryG

Got it.. I enabled\configured VOIP options on the 120.. will let you know how it goes. [:)]
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 tuscani over 12 years ago in reply to BarryG

Got it.. I enabled\configured VOIP options on the 120.. will let you know how it goes. [:)]
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 tuscani over 12 years ago in reply to tuscani

Enabling the SIP and H323 on the UTM120 didn't make a difference.. still seeign the drops on the firewall. VOIP vender stated it shouldn't matter if these ports a blocked.. so I guess I won't worry about it. [:)]
Cancel
Vote Up 0 Vote Down

Cancel