Firewall/NAT

Hi,

This is probably a PEBCAK problem, but...

WAN interface - 172.16.9.1/24
LAN interface - 10.9.0.1/24
FileServer - 10.9.0.12
Client - 172.16.9.26

Client machine specific hole through the FW from the WAN to the FileServer is applied on the WAN ruleset. LAN ruleset has the default any any any. Client can't connect to the FileServer (Win7 to Win2008). When I look at my logs I see that 445/tcp and 139/tcp are being blocked from the FileServer to the Client (LAN to WAN). This seems to be in contradiction to the LAN any any any rule. I've tried putting 2 specific rules for these services with host level source and destination above the generic rule in the rulebase but it's still being blocked.

I have 'block private addresses' turned off on the WAN interface, BTW.

Any help would be appreciated!

TIA,
Jules.

do you have a matching NAT rule for the firewall rule? you must have both.