Author Topic: Firewall droping connection VPN  (Read 1037 times)

igord93

  • Zen Monk
  • **
  • Posts: 56
  • Karma: +0/-0
    • View Profile
Firewall droping connection VPN
« on: August 29, 2014, 09:46:50 pm »
Hello,

I'm trying to comunicate a device that uses port 51xxx to synchronize with a computer in the other side of the VPN, the source port varies but the destination is always 51xxx.

It is always dropping the connection, how do I solve this? already tried some iptables but didnt work.

Thank u all

igord93

  • Zen Monk
  • **
  • Posts: 56
  • Karma: +0/-0
    • View Profile
Re: Firewall droping connection VPN
« Reply #1 on: September 01, 2014, 10:58:25 pm »
how to avoid this?

[ 1473.519580] zentyal-firewall drop IN=tap0 OUT=eth1 MAC=xxxxxxx SRC=192.168.0.223 DST=192.169.0.200 LEN=40 TOS=0x00 PREC=0x00 TTL=1xx ID=23xxx PROTO=TCP SPT=2xx DPT=51xxx WINDOW=0 RES=0x00 RST URGP=0 MARK=0x1

jbahillo

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1444
  • Karma: +77/-2
    • View Profile
Re: Firewall droping connection VPN
« Reply #2 on: September 02, 2014, 03:12:49 pm »
Hello:

Without more data is almost impossible to guess which rule is triggering that drop.

Mostly we will need to know:

IP addresses granted by VPN
firewall rules deployed for internal networks
IP addresses in LAN...
Have you just tried to add an allow rule on top of internal network rules which allowed trafic from such IP adress?


igord93

  • Zen Monk
  • **
  • Posts: 56
  • Karma: +0/-0
    • View Profile
Re: Firewall droping connection VPN
« Reply #3 on: September 11, 2014, 01:54:38 pm »
Sorry, I was out a bit.

How can I do that?

How do I place this rule and where?

Thnaks
« Last Edit: September 11, 2014, 02:02:13 pm by igord93 »

jbahillo

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1444
  • Karma: +77/-2
    • View Profile
Re: Firewall droping connection VPN
« Reply #4 on: September 11, 2014, 01:56:06 pm »

igord93

  • Zen Monk
  • **
  • Posts: 56
  • Karma: +0/-0
    • View Profile
Re: Firewall droping connection VPN
« Reply #5 on: September 11, 2014, 02:36:36 pm »
1. Ip adresses on the VPN are 192.2.1.x

2. the image below

3. The IP that i'm trying to comunicate through the VPN is 192.168.0.223 ( which is in the 0 - Servidores object)

4. The scenario of the internal network is the one in the picture

I needed that to have unrestricted access for servers in the network ai to the internet from the other servers
« Last Edit: September 11, 2014, 02:38:29 pm by igord93 »