problem with network behind router behind green

[Guest]

[gmurz]

hi,

i have a separate router on my green network which connects to our second location.

network_behind_router --------- router -------------- green_iface_of_efw
10.0.1.0/24                      10.0.1.5 || 10.0.0.8          10.0.0.1

i configured a route

   source          destination      gateway      
10.0.0.0/24    10.0.1.0/24    10.0.0.8


so far no problem... pinging vice versa works

but when i try to manage my server in the second network via rdp or vnc,
i can do that for 2minutes and the connections fails

i realized some entry in the firewall log like :

Mar 4 08:22:18      NEW not SYN?     br0     TCP     10.0.0.192   1519    00:60:e0:e1:e6:4c    10.0.1.11   3389


after that i tried to make a rule that allows all traffic from 10.0.0.0/24 to 10.0.1.0/24, but that doesnt change anything.

any idea???

[jpgillivan]

I had a similar problem when trying to use a remote control program on a computer outside our network.  What I did was put my machine (either MAC or IP) in the "Bypass" section of the Proxy > HTTP > Configuration > Allowed Subnets Per Zone  and that resolved my issue.

[boodeey]

i got the same problem ... i've try to change allowed subnet perzone or even disable http proxy .... and i still got the problem

[npeterson]

It sounds like you have your default gateway set to the endian box, then endian is routing packets to your router.

Your PC -> FW -> Router -> Server B

Remember endian is a firewall, it looks at all the packets, and most likely its getting picked up by a linux firewall rule and droped as abuse.

A better setup would be to setup your router(10.0.0. as your pc's default gateway, and the default route of the router, the firewall.

Clients -> Router -> FW