EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: alexroi17 on Thursday 21 January 2010, 06:50:40 am



Title: cannot access blue from green.
Post by: alexroi17 on Thursday 21 January 2010, 06:50:40 am
Just installed EFW 2.3 and cannot access blue from green.

My setup:
----------------
green = eth0 = 192.168.0.1
blue = eth1 = 192.168.1.1
orange = eth2 = 192.168.2.1
red = eth3 = dhcp

Inter-zone firewall rule GREEN BLUE <ANY> ->  is installed by default.

Computer A gets ip = 192.168.0.10 DNS 192.168.0.1 Gateway 192.168.0.1 from DHCP on green

Code:
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
             0.0.0.0          0.0.0.0      192.168.0.1  192.168.0.10     10
         192.168.0.0    255.255.255.0         On-link   192.168.0.10    266
        192.168.0.10  255.255.255.255         On-link   192.168.0.10    266
       192.168.0.255  255.255.255.255         On-link   192.168.0.10    266
===========================================================================
Persistent Routes:
  None

Computer B gets ip = 192.168.1.10 DNS 192.168.1.1 Gateway 192.168.1.1 from DHCP on blue

If I can ping both green and blue ips of efw box, but not anything else on blue.
Code:
Pinging 192.168.0.1 with 32 bytes of data:
Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
Code:
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time<1ms TTL=64
Code:
tracert 192.168.1.10

Tracing route to 192.168.1.10 over a maximum of

  1    <1 ms    <1 ms    <1 ms  192.168.0.1
  2     *        *        *     Request timed out.


Title: Re: cannot access blue from green.
Post by: alexroi17 on Saturday 23 January 2010, 01:49:06 am
Any tips how to troubleshoot?


Title: Re: cannot access blue from green.
Post by: mrkroket on Saturday 23 January 2010, 08:01:27 am
Try to create a global inter-zone rule, to accept ANY traffic from ANY (i.e. like disabling the firewall). Just to test if traffic passes this way.
 Enable all logs on inter-zone to see what happens.

Give us more tracert, from computer A to B, EFW and Red DHCP server. The same from computer B and endian box.