EWF Community 3.0.devel incoming routed traffic

[Guest]

[MattHo]

Hi All,

I'm a newbie of EFW.

I got 3 public IPs (1.1.1.1 - 1.1.1.3), I'm planning to setup 2 mail server (10.10.10.1 - for POP3 & IMAP) and other mail server (10.10.10.2 - SMTP & Web) behind the firewall (in 1 Ethernet port), below is my current setting.

1/ on Firewall > Port forwarding / NAT, I set 1.1.1.1 (ANY - ALLOW with IPS) to 10.10.10.1
2/ on Firewall > Source NAT, I set all out-going email from 10.10.10.1 & 10.10.10.2 will be redirect to 1.1.1.3
3/ on Firewall > Incoming routed traffic, I set 1.1.1.3 (ANY - ALLOW with IPS) to 10.10.10.2

Under Network tab > Interface, I've created 1 uplink only.
Main Uplink - 1.1.1.1
- Add additional addresses (1.1.1.2/24 - 1.1.1.3/24)

Above setting is working well except point 3 (1.1.1.3), I cannot connect to this server. Any one can give me a hits of this? 

Many thanks.

[speccompsol]

Your "3" Rule should be Port Forwarding as you did with rule "1"

[MattHo]

Your "3" Rule should be Port Forwarding as you did with rule "1"

Hi speccompsol,

Thanks for your reply.

Sorry for my typing mistake, the correct planning should look like below:
...
1/ on Firewall > Port forwarding / NAT, I set 1.1.1.1 (ANY - ALLOW with IPS) to 10.10.10.1
2/ on Firewall > Source NAT, I set all out-going email from 10.10.10.1 & 10.10.10.2 will be redirect to 1.1.1.3
3/ on Firewall > Incoming routed traffic, I set 1.1.1.2 (ANY - ALLOW with IPS) to 10.10.10.2
...


I've tried to remove all my rules under Firewall > Port Forwarding / NAT.
Then add 1.1.1.1 (ANY - ALLOW with IPS) to 10.10.10.1 and 1.1.1.2 (ANY - ALLOW with IPS) to 10.10.10.2
But it still same, I cannot connect to 10.10.10.1 & 2 also this time.

Would you mind advise me the correct step?
Many thanks for your help.

[Timmeh]

Did you check the logs to see if the connection was being made / blocked / allowed?

[MattHo]

Apr 14 12:31:03   INPUT:DROP   eth0   TCP   14... 50280   1.1.1.2   80

The connection is blocked, is I missing something?