EFW Support

Support => General Support => Topic started by: gmurz on Tuesday 04 March 2008, 06:32:08 pm



Title: problem with network behind router behind green
Post by: gmurz on Tuesday 04 March 2008, 06:32:08 pm
hi,

i have a separate router on my green network which connects to our second location.

network_behind_router --------- router -------------- green_iface_of_efw
10.0.1.0/24                      10.0.1.5 || 10.0.0.8          10.0.0.1

i configured a route

   source          destination      gateway      
10.0.0.0/24    10.0.1.0/24    10.0.0.8


so far no problem... pinging vice versa works

but when i try to manage my server in the second network via rdp or vnc,
i can do that for 2minutes and the connections fails

i realized some entry in the firewall log like :

Mar 4 08:22:18      NEW not SYN?     br0     TCP     10.0.0.192   1519    00:60:e0:e1:e6:4c    10.0.1.11   3389


after that i tried to make a rule that allows all traffic from 10.0.0.0/24 to 10.0.1.0/24, but that doesnt change anything.

any idea???





Title: Re: problem with network behind router behind green
Post by: jpgillivan on Friday 29 May 2009, 01:12:44 am
I had a similar problem when trying to use a remote control program on a computer outside our network.  What I did was put my machine (either MAC or IP) in the "Bypass" section of the Proxy > HTTP > Configuration > Allowed Subnets Per Zone  and that resolved my issue.


Title: Re: problem with network behind router behind green
Post by: boodeey on Friday 29 May 2009, 01:44:34 pm
i got the same problem ... i've try to change allowed subnet perzone or even disable http proxy .... and i still got the problem


Title: Re: problem with network behind router behind green
Post by: npeterson on Friday 05 June 2009, 01:54:58 am
It sounds like you have your default gateway set to the endian box, then endian is routing packets to your router.

Your PC -> FW -> Router -> Server B

Remember endian is a firewall, it looks at all the packets, and most likely its getting picked up by a linux firewall rule and droped as abuse.

A better setup would be to setup your router(10.0.0.8) as your pc's default gateway, and the default route of the router, the firewall.

Clients -> Router -> FW