Firewall/NAT

Hi,

I am quit new at M0n0wall, using following M0n0wall version: "embedded-1.3b16.img" on a ALIX board.
So far most things go well, have to say a very very nice Firewall system, many thanks.

There is one think I am currently "fighting" with. So before using more time trying to solve it, I like to ask if my problem may be a bug in the beta release I am using (see above):

My M0n0wall-box filters between following networks:
- external Network: 192.168.80.0 (official Lan, everyone can use, guest etc..)
- external IP:192.168.80.99
- internal Network: 192.168.1.0 (private Lan)
- internal IP:192.168.1.1

Inside the internal network, I have a SSH server (192.168.1.50) witch I want to be accessible from the external LAN as well. The according configuration of M0N0wall, NAT rule + Automatic Firewall rule seems quite simple and self explaining to me. To make sure I do not miss something I also watched the according screencast.
Configuration looks OK (see attachment). But unfortunately SSH does not work and also nmap used from the external network does not show any open port at m0n0walls IP (192.168.80.99).

Is it a Beta bug, or did i do something wrong?
Many thanks for any advices

Its me again.
looks like the firewall is blocking the SSH connection request to port 22, see attached Firewall log.

Any suggestions....

Hi,

Is there anyone with the same problem?

You need to remove the rule that blocks 1918 networks.  your external IP is a 1918 address..  the rules are executed from the top down.  if you still want to block the 1918 addresses after the allow, you will have to add the address spaces manually.

Many thanks for that advise. I see, I'am a bloody beginner.

did my suggestion resolve this?

Code:

did my suggestion resolve this?

Yes, I just removed the rule that blocks 1918 networks and all works fine.

BTW:
Do you know how I can add this rule again on the end of the rules list?

to my knowledge, you can't add the single 1918 rule back in.  you have to add the networks in individual rules.  I also block the 127 localhost addresses as well.  check out the screenshot.

works great, thanks