On 10 Sep 2007 at 16:37, Brieseneck, Arne, VF-Group wrote:
>
>
> Hi all,
>
> it seems as if my ssh rule for traffic coming from WAN towards a
> server in LAN dows not work.
>
> The configuration is very simple. And without the rule deny
> which should allow this traffic and an any-any therefore it is working.
> So routing etc. is fine.
>
> This is the config:
> TCP 10.5.40.34:22 --> 192.168.50.90:22
>
>
>
> and the flow back is allowed in the LAN section:
> * LANnet:* --> *:*
>
>
>
>
> But here is the error:
> denied 1632:45364880 WAN 10.5.40.34:4502 -->
> 192.168.50.190:22
>
>
>
> This sounds strange to me, because SSH only needs port 22 and no
> passive ports like FTP.
>
> Has anyone a hint?
>
>
> Thanks a lot for your help
>
>
Robert L. Pumphrey
1mage Software
303-773-1424 |