This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

eth0 <-> eth2 connection for 2 local networks

Hi Folks,

i try to use a UTM 9.0.0.5 to connect two local Networks.

eth0 192.168.0.180/24
eth2 192.168.241.180/24

under Network protection -> Firewall -> icmp

all possibilities are active

i can ping from the eth2 Network only to the eth0 Interface, and not through the utm to the eth0 Network.

the other direction works fine, from the eth0 Network i can reach the whole eth2 Network.

i have no Firewall rules at the Moment.

i read a few threats here at the board and one meaning was, that it is enough to active the icmp rules to reach both Networks with ping (for first step).

Maybe the meaning i found is wrong or i missed something.

so thanks very much for some help.

harold


This thread was automatically locked due to age.
Parents
  • Like Gilipeled says, anything that is not specifically allowed by a firewall rule is automatically denied.
    Create:

    lan1 -> lan2 -> ICMP allow
    lan2 -> lan1 -> ICMP allow

    to allow pings between hosts in both subnets. If you need more than only pings you'll have to define it (not only use ICMP).

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Reply
  • Like Gilipeled says, anything that is not specifically allowed by a firewall rule is automatically denied.
    Create:

    lan1 -> lan2 -> ICMP allow
    lan2 -> lan1 -> ICMP allow

    to allow pings between hosts in both subnets. If you need more than only pings you'll have to define it (not only use ICMP).

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

Children
No Data