masteripper
join:2009-06-18
| A Helping Hand with Full feature -Global IP (Zx 662h)
Hello to everybody
I am really stuck and i need some help.
The story.
I have a static IP and a block of 16 Global IP
My router is set to the Static IP
I want to use 1 of the global IP for use by an FTP server.
I go to Full-Feature
1st rule Global IP -> Internal IP (1-1)
2nd rule Internal (Ip1 - InternalIp100)---> Static Ip (M-1)
3rd rule ....... - ........ -> Static IP (server)
What i am doing wrong and i cannot get a single ping from my FTP Server.
Almost everything in firewall is shut down.
The static Ip is replying perfectly but none from the block of global IPs
Am i thinking wrong.???? |
|
dslpartner
join:2005-02-18 | Switch rule #2 and #3 around and see if it helps  |
|
masteripper
join:2009-06-18 | There where already swiched.Is not working
At first it was #2 ,#3,#1 |
|
dslpartner
join:2005-02-18
| reply to masteripper
M-1 rules should be the last in the rule set ie rule #2 should be rule #1.
Keep the firewall active, but allow all traffic from WAN to LAN and enable logging, then you can see if the traffic gets trough NAT and to the firewall.
--
"Perl is executable line noise, Python is executable pseudo-code."
|
|
masteripper
join:2009-06-18
1 edit | Do you mean
#1 1-1
#2 Server
#3 M-1
???
I can't really see what this adjustmnet will do.....??? |
|
dslpartner
join:2005-02-18
| reply to masteripper
Not sure what you mean with Server IP, long time since I played with the ZyNOS multi-nat features, but 1-M should be as far down the list as possible.
If the server rule is a part of the 1-M rule then, you are right.
But is your ftp server a part of the 1-M rule or is it the 1-1 rule?
What happens if you try to traceroute to one of the 16 global ip's you got, from another host on the internet?
--
"Perl is executable line noise, Python is executable pseudo-code."
|
|
