Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 07-01-2009, 11:39 AM
Junior Member
 
Join Date: Jul 2009
Posts: 3
Question Please Help with port forwarthing

I am using Astaro Security Gateway Firmware version: 7.402
I try to port forward:
My Internet address is 87.246.7.30
My Gate address is 192.168.111.230
My Server address is 192.168.111.202
I want to reach port 3299 on my server from 194.9.7.17

I create Network Security » Packet Filter
Source: Name: VBS
Type:Host
Address:194.9.7.17
Interface: Any
Comment:SapRouterVBS

Service: Any

Destination:
Source: Name: R3Send
Type:Host
Address:192.168.111.202
Interface: Internal
Comment:

i have two rules on Network Security » Packet Filter
My first rules is VBS ---->Any--->rR3send
Second is Any----->Any---->Any

Please tell me what i must do to solve my problem
this is my Live Log: Packet filter
13:36:56 Default DROP TCP 194.9.7.17 : 45985
→ 87.246.7.30 : 3299
[SYN] len=48 ttl=117 tos=0x08 srcmac=00:00:00:00:00:00 dstmac=00:1e:8c:5a:5d:ec


13:36:58 Default DROP TCP 194.9.7.17 : 45985
→ 87.246.7.30 : 3299
[SYN] len=48 ttl=117 tos=0x08 srcmac=00:00:00:00:00:00 dstmac=00:1e:8c:5a:5d:ec


13:37:04 Default DROP TCP 194.9.7.17 : 45985
→ 87.246.7.30 : 3299
[SYN] len=48 ttl=117 tos=0x08 srcmac=00:00:00:00:00:00 dstmac=00:1e:8c:5a:5d:ec

dstmac is mac on my WAN Card ot Astaro Gateway
Reply With Quote
  #2 (permalink)  
Old 07-01-2009, 11:57 AM
Junior Member
 
Join Date: Feb 2004
Location: Germany
Posts: 14
Default

Did u setup a DNAT-rule for that server?
Reply With Quote
  #3 (permalink)  
Old 07-01-2009, 12:02 PM
Junior Member
 
Join Date: Jul 2009
Posts: 3
Default No

No Please tell me how to look DNAT rull for that case
Reply With Quote
  #4 (permalink)  
Old 07-01-2009, 03:26 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,388
Default

Delete both packet filter rules.

'Network Security >> NAT' 'DNAT/SNAT' tab
Traffic Source: VBS
Traffic Service: Any
Traffic Destination: External (Address)

NAT mode: DNAT (Destination)

Destination: R3Send
Destination Service: [leave empty]

Automatic packet filter rule: [checked]
This will redirect all traffic from VBS to R3Send; is that what you want?

Cheers - Bob
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #5 (permalink)  
Old 07-02-2009, 12:02 PM
Junior Member
 
Join Date: Jul 2009
Posts: 3
Smile Thanks for all support

Thanks for all
Reply With Quote
Reply

Tags
help port

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 03:29 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.