Cannot access EFW from local subnet, works fine from other LAN

[Guest]

[mrben]

Hi all -

We have a fairly complex network setup with a variety of satellite sites (10.x.0.0/16) linked in to a HQ (10.1.0.0/16) - the links between sites are handled over VPN and all arrive on the LAN side of the connection at HQ, so all traffic hitting EFW is from the LAN rather than directly from the internet.

EFW version is 2.5.1, set up with a single NIC in bridging mode.

Connectivity from all satellite sites (10.2, 10.3, 10.4 etc) is fine - I can SSH in, access web interface directly over HTTP, browse use proxy etc but for the life of me I can't get any connectivity directly to the FW at the (10.1) HQ site.

EFW can ping out to all other servers on the 10.1 range, the gateway, other sites etc, but any attempt to connect *to* the EFW server from PCs, servers etc at that site fails.   No SSH, no web admin, no browsing.

Outgoing Firewall is off, interzone firewall is off.

Anything stupid, obvious or not so obvious I am missing please?

[endianupdate]

Have you checked the Firewall > System Access rules to make sure that the 10.1 range is not blocked to any of the service ports?