EFW Support

Support => General Support => Topic started by: bangsters on Sunday 27 November 2011, 06:40:50 am



Title: Outbound traffic to show DMZ IP instead of firewall's uplink IP?
Post by: bangsters on Sunday 27 November 2011, 06:40:50 am
Hi.

We are using incoming routed traffic to route our multiple public IPs to our DMZ zone.  It's working fine on this part.

However, for the outbound traffic, all traffic coming from our servers in the DMZ are reflecting the firewall's main IP.  How can we change this such that all outbound traffic from DMZ to RED interface reflect the IP of that particular server?

Please advice.

Thanks


Title: Re: Outbound traffic to show DMZ IP instead of firewall's uplink IP?
Post by: shadowbranch on Tuesday 29 November 2011, 12:50:25 am
Go to firewall then to the source nat tab. Under that you can enter an IP or IP range that should be masked or source natted to a specific ip. Just set the destination to be your main uplink or any uplink.


Title: Re: Outbound traffic to show DMZ IP instead of firewall's uplink IP?
Post by: bangsters on Tuesday 29 November 2011, 02:14:09 pm
Thanks!!!  Got it working.

On a side note, how do I enable system access to certain mac addresses only??  From the firewall -> system access menu, it shows that the source can be IP or MAC.  But I tried entering my laptop's mac address.... but it did not work.

any advice?  I need to be able to access firewall via mac address in case of emergency when I'm on an unknown network.


Title: Re: Outbound traffic to show DMZ IP instead of firewall's uplink IP?
Post by: red on Sunday 11 December 2011, 04:43:55 pm
Hi.

We are using incoming routed traffic to route our multiple public IPs to our DMZ zone.  It's working fine on this part.

Thanks

Hy every body every where;

I'm trying since two days, to route traffic from red to DMZ without success :(
How you did it, which rule should be applied it ?

We've got a modem/router ---> EFW ---> DMZ


The other thing, is there a possibility to monitore EFW from RED zone (from Internet).
Which rule(s) should be applied ?

Thanks a lot, our EFW is in a production and we are little bit frustating since we are not able to do such things .

Thanks again

red