News: This forum is now permanently frozen.
Pages: [1]
Topic: Firewall with a mind of its own  (Read 2002 times)
« on: July 21, 2013, 15:54:18 »
Masterofrpm *
Posts: 6

I am currently having issues with my firewalls rules being ignored. I am in the implementation phase of my firewall and I created allow all rules for every interface. I have 5 interfaces with 4 being used. WAN, LAN, Opt1, and Opt2 all on a private networking scenario using VMwares virtual networks. all interfaces are properly configured and I have one NAT/Forward rule in place with an accompanying explicit rule. However, my issue is that even with my allow all access firewall rules there is alot of traffic still hitting the default rule and being blocked.  The traffic that is mostly being blocked is IGMP (from my gateway router) and any traffic with ports being higher than 50000. 
This brings me to a few questions.
1. Can I edit how the default rule behaves and how it's configured?
2. Why are my explicit IGMP allow rules being ignored?
3. Why are my Allow All rules being ignored?
4. Why are ports being blocked above 50000?
5. Why is there not an option to disable blocking ports above 50000?
« Reply #1 on: July 21, 2013, 16:44:51 »
Fred Grayson *****
Posts: 994

Not sure how you can helped with rules that you haven't shown us.

--
Google is your friend and Bob's your uncle.
« Reply #2 on: July 22, 2013, 01:31:47 »
Masterofrpm *
Posts: 6

Here's the proof of what I described in my post.


* DMZ.JPG (26.42 KB, 587x226 - viewed 276 times.)

* WAN.JPG (42.68 KB, 589x398 - viewed 246 times.)

* FWLog.JPG (154.38 KB, 551x784 - viewed 346 times.)

* Hotspot.JPG (26.41 KB, 579x232 - viewed 270 times.)
« Reply #3 on: July 22, 2013, 02:36:22 »
Fred Grayson *****
Posts: 994

Obfuscating anything to do with private IP addresses is absolutely pointless, and can discourage those who could and would help.

--
Google is your friend and Bob's your uncle.
« Reply #4 on: July 22, 2013, 03:29:51 »
Masterofrpm *
Posts: 6

I am simply asking for help on specific issues and understand the need for information necessary to answer the question at hand. I do not, however, understand you stating people won't help if I obscure unnecessary network information. Either help or not... your choice. I did not ask for an analysis of faults in my post but appreciate your efforts as a moderator.  Smiley
« Reply #5 on: July 22, 2013, 03:56:20 »
Fred Grayson *****
Posts: 994

And with that......I'll pass. Good luck to you.

--
Google is your friend and Bob's your uncle.
« Reply #6 on: July 23, 2013, 01:58:38 »
Lee Sharp *****
Posts: 517

Well...  Fragmented packets out of order may be blocked.  That is normal.  As for the other stuff...  It is kinda hard to tell as some of the info I need is under big blue squiggles.
« Reply #7 on: July 24, 2013, 11:47:13 »
Masterofrpm *
Posts: 6

fragmented packets seemed to be it ... Thank you very much for the brainstorming Grin
« Reply #8 on: July 24, 2013, 21:47:41 »
Lee Sharp *****
Posts: 517

Glad to help.  Grin
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines