News: This forum is now permanently frozen.
Pages: [1]
Topic: M0n0wall blocking cisco ip addresses  (Read 3611 times)
« on: June 19, 2012, 17:27:38 »
Blue_Alien *
Posts: 6

Hello, I have m0n0wall running as my router at home. I can connect to remote desktop and the utorrent web interface from everywhere I've tried except when I'm at work at Cisco. It seems that m0n0wall is blocking Cisco's ip addresses. I was originally unable to connect to the m0n0wall gui from work but was able to after some fiddling.

How can I allow Cisco ip addresses through the firewall to allow remote desktop and utorrent webui?
« Reply #1 on: June 19, 2012, 22:13:35 »
Lennart Grahl ***
Posts: 153

It's probably the other way round. Why should m0n0wall block Cisco IPs at default?

You have to be a bit more precise about your problem: What do you want to accomplish and what have you done that you've been able to accomplish it after some "fiddling"?
« Reply #2 on: June 19, 2012, 22:47:09 »
Blue_Alien *
Posts: 6

I was messing with the firewall rules and adding the cisco ip's I saw show ip in the firewall logs. I'm not sure what rule made it work.
« Reply #3 on: June 20, 2012, 01:38:32 »
Lennart Grahl ***
Posts: 153

Sorry, but that's not really a helpful answer.

Please paste your firewall and NAT rules here so we can have a look.
« Reply #4 on: June 22, 2012, 17:01:36 »
Blue_Alien *
Posts: 6

I have attached my firewall rules.


* firewall rules.png (74.95 KB, 750x941 - viewed 577 times.)
« Reply #5 on: June 22, 2012, 17:08:32 »
Fred Grayson *****
Posts: 994

The rules don't mean much without the NAT table.

But all I need to see is the first rule to be able to say you are asking for trouble.

--
Google is your friend and Bob's your uncle.
« Reply #6 on: June 22, 2012, 17:10:36 »
Blue_Alien *
Posts: 6

Here are my nat rules.


* nat rules.png (45.75 KB, 749x626 - viewed 499 times.)
« Reply #7 on: June 24, 2012, 06:08:42 »
cmb *****
Posts: 851

You have that open to the world, so it's highly unlikely it's m0n0wall, it's almost certainly egress filtering on Cisco's network not allowing it out.
« Reply #8 on: June 25, 2012, 21:14:55 »
Blue_Alien *
Posts: 6

It looks like it is m0n0wall blocking it.


* firewall.png (20.98 KB, 586x363 - viewed 455 times.)
« Reply #9 on: June 26, 2012, 13:04:10 »
Lennart Grahl ***
Posts: 153

If 166.70.x.x is your home ip address then you are trying to connect to a port that you haven't opened (53964, 54202, 59339).
Could it be that you are trying to establish a passive ftp connection?
« Last Edit: June 26, 2012, 13:06:43 by Lennart Grahl »
« Reply #10 on: June 26, 2012, 17:06:35 »
Blue_Alien *
Posts: 6

That is my home ip address. I am trying to connect with windows remote desktop. I have opened the port to my computer's internal ip address. Do I need to open the port on the external ip too?
« Reply #11 on: June 26, 2012, 22:36:48 »
Lennart Grahl ***
Posts: 153

I have opened the port to my computer's internal ip address. Do I need to open the port on the external ip too?

No, as you've already created the necessary NAT rule to establish a connection to port 3389.
However, it seems that the computer you are using at work is trying to establish a connection to a completely different port which obviously doesn't work.

By the way: The firewall rules below the first one are not necessary as you've opened your firewall to anything in the first rule.
« Reply #12 on: July 02, 2012, 05:46:31 »
cmb *****
Posts: 851

None of that traffic you're showing blocked has anything to do with remote desktop. It looks like random Internet noise. Most of it's sourced from some ISP in the UK, the rest of it from "Specific Media", a US company. None of it from Cisco. Take off your allow all rule on the top of WAN, move the 3389 rule to the very top of your rules, enable logging on the 3389 rule, try to connect and then see whether that connection attempt is logged. It's almost certain Cisco doesn't allow people to RDP out to random places on the Internet, that's a security risk most large companies are going to cut off.
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines