Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Tripisis]

Hello. I got a postage machine in a small office that needs connection with an update server for rates. The server uses port 53, 80, 443 and 21. Port 443 is open as default so that one is okay. But the 3 others i cannot get open.

Created a new interfaceadress for the machine also. 172.17.100.53

dmz_ip: 172.17.100.254
dmznet 172.17.100.0/24

lan_ip:192.168.10.1
latnet: 192.168.10.0/24

wan_ip: 192.168.1.10
wan_net: 255.255.255.0
wan_gw: 192.168.1.1

The network is setup like this.

modem - DFL-210 - switch - machine

The switch is on the DMZ net.

The IP rules is as following.

Name: Frank_53_Sat
Action: SAT
Src: any
Scr Net: all-nets
Dest if: core
Dest Net: wan_ip
Service: dns-udp

SAT-General settings
Destination IP: *Frankeringsmaskin*
all to one mapping

Name: Frank_53
Action: Allow
Src: any
Scr Net: all-nets
Dest if: core
Dest Net: wan_ip
Service: dns-udp

It requires port 53 UDP. The 2 others i have created as the same. There is allready services for the ports i am going to use so i have not created any new services.
Sorry for some misspelling here

[Gattsu]

You want to open ports for a specific address inside the DFL's local DMZ network? Not exactly sure but you can try the following to allow inbound traffic to server.

Create object for host-- 172.17.100.53

Create Service object--
Name: Test_ports
Source 1-65535
Destination 443,80,53,21

Create IP policy--
Source: Wan1, All-Nets
Destination: Core, WAN IP
Service: Test_ports

Source Translation: NONE
Destination Translation: SAT
Address Action: Single IP
new IP address : 172.17.100.53
new port: none