masteripper
join:2009-06-18
| A Helping Hand with Full feature -Global IP (Zx 662h) Hello to everybody
I am really stuck and i need some help.
The story.
I have a static IP and a block of 16 Global IP
My router is set to the Static IP
I want to use 1 of the global IP for use by an FTP server.
I go to Full-Feature
1st rule Global IP -> Internal IP (1-1)
2nd rule Internal (Ip1 - InternalIp100)---> Static Ip (M-1)
3rd rule ....... - ........ -> Static IP (server)
What i am doing wrong and i cannot get a single ping from my FTP Server.
Almost everything in firewall is shut down.
The static Ip is replying perfectly but none from the block of global IPs
Am i thinking wrong.???? | |
|
 dslpartner
join:2005-02-18 | Re: A Helping Hand with Full feature -Global IP (Zx 662h) Switch rule #2 and #3 around and see if it helps  | |
|
 | masteripper
join:2009-06-18 | Re: A Helping Hand with Full feature -Global IP (Zx 662h) There where already swiched.Is not working
At first it was #2 ,#3,#1 | |
|
dslpartner
join:2005-02-18
| M-1 rules should be the last in the rule set ie rule #2 should be rule #1.
Keep the firewall active, but allow all traffic from WAN to LAN and enable logging, then you can see if the traffic gets trough NAT and to the firewall.
--
"Perl is executable line noise, Python is executable pseudo-code."
| |
|
| masteripper
join:2009-06-18
1 edit | Re: A Helping Hand with Full feature -Global IP (Zx 662h) Do you mean
#1 1-1
#2 Server
#3 M-1
???
I can't really see what this adjustmnet will do.....??? | |
|
dslpartner
join:2005-02-18
| Not sure what you mean with Server IP, long time since I played with the ZyNOS multi-nat features, but 1-M should be as far down the list as possible.
If the server rule is a part of the 1-M rule then, you are right.
But is your ftp server a part of the 1-M rule or is it the 1-1 rule?
What happens if you try to traceroute to one of the 16 global ip's you got, from another host on the internet?
--
"Perl is executable line noise, Python is executable pseudo-code."
| |
|
|
|
|
