|
||||||||
Hi Preparing a server with vmware GSX. On it there will be a number of virtual machines and I'm using M0n0Wall to act as a firewall. At this moment however, the server is in my internal network. So the WAN interface has a private IP: 192.168.0.108 / 24. The LAN interface is 192.168.15.254 / 24. On the side of the LAN interface I have a few virtual machines (dc01 192.168.15.1 and ex01 192.168.15.2). From both dc01 and ex01 I can access the m0n0wall webGui. They can also surf the web, using NAT from M0n0wall and going through my LAN. Their default gateway is set to m0n0wall (192.168.15.254). On the WAN interface there is the 192.168.0.0/24 network. Default gateway is 192.168.0.254. My client pc is 192.168.0.102. client 192.168.0.102 ---> WAN 192.168.0.108(dhcp) / LAN 192.168.15.254 <-------> EX01 192.168.15.2 Now I've created the following rules: Firewall -> NAT -> inbound: If = WAN, Proto = TCP, Ext.Port Range = 25 (SMTP), NAT IP = 192.168.15.2, Int. Port range = 25 (SMTP), Description = SMTP incoming Firewall -> Rules -> LAN: proto = *, Source = LAN Net, Port = *, Destination = *, Port = *, Description = Default LAN -> Any Firewall -> Rules -> WAN: proto = TCP, Source = *, Port = *, Destination = 192.168.15.2, Port = 25 (SMTP), Description = NAT SMTP incoming. When I try to telnet from my client to 192.168.0.108 port 25, I receive no reply. The logfile looks like this: 22:06:47.934316 lnc0 @0:13 b 192.168.0.102,3540 -> 192.168.15.2,25 PR tcp len 20 48 -S IN 22:06:41.911158 lnc0 @0:13 b 192.168.0.102,3540 -> 192.168.15.2,25 PR tcp len 20 48 -S IN 22:06:38.940851 lnc0 @0:13 b 192.168.0.102,3540 -> 192.168.15.2,25 PR tcp len 20 48 -S IN I tried the same with http. Same result. On the EX01 Webserver I see no log entry of incoming trafic. To verify that smtp and http work on 192.168.15.2, I accessed them from 192.168.15.1 and this works. I can't figure out what is going wrong..... Any help would be great Gabrie ########################################### This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange. For more information, connect to http://www.f-secure.com/ |