This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Wireless Open Port

Giannis Karachalios over 4 years ago

Hello all,

I am trying to have a connection between a computer and a device over the Wifi Network with no success.

I have made a wireless network with client isolation OFF.

For successful connection between those two devices tcp port 10080 and udp 1024 and 8010 must be open.

The devices are connected to wireless network of the SG115w through an AP30.

What should i do in order to have successful communication?

Best Regards

This thread was automatically locked due to age.

0 Jaydeep over 4 years ago

Hi Giannis Karachalios

Have you checked the Firewall logs in UTM9? What does it say? Further, would you please try creating a Firewall rule to allow traffic between Wifi Network? With source and destination as Wifi network. That might help.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Giannis Karachalios over 4 years ago in reply to Jaydeep

Hello

thank you for your reply

i have already tried your suggestions. A firewall rule(with logs allowed) allowing traffic from the whole wireless network segment to itself with all ports for testing purposes.

Firewall logs don t seem to be helpful at all

Something i might be missing?

Best Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaydeep over 4 years ago in reply to Giannis Karachalios

Is there anything in the packetfilter.log? Check the packet flow using TCPDUMP in UTM. Use this command: tcpdump -nei any host <src.ip> and host <dst.ip> and follow the step 1 to sign in as Root in CLI of the Sophos UTM

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Giannis Karachalios over 4 years ago in reply to Jaydeep

Hello Jaydeep

thank you for your reply

i tried tcpdump before no traffic between the device and the pc.

But i recently found out something else

The device with IP 192.168.3.52 sends to Link Local address for some reason.

11:50:36.405426 In 98:8b:ad:20:b7:9f ethertype IPv4 (0x0800), length 66: 192.168.3.52.39508 > 169.254.14.95.10080: Flags [S], seq 788390100, win 8192, options [mss 1460,nop,nop,nop,eol], length 0

I did arp -a both on pc and router everything seems ordinary
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaydeep over 4 years ago in reply to Giannis Karachalios

Hi Giannis Karachalios

If the TCPDUMP says that packets were sent to an APIPA IP, then there's no issue with the UTM. You may try to install Wireshark on your machine and check which destination IP address the traffic is sent to.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Giannis Karachalios over 4 years ago in reply to Jaydeep

Hi Jaydeep

I tried the device and the same PC on a different network with different router and it worked instantly. Same settings on PC, no changes.

I have wireshark on the PC and it captures packets from the Device IP for example when i ping it but not when i try to connect the Device with the PC (i am expecting to see packets coming from Device to PC on TCP port 10080 and UDP 1024 and 8010).

Best Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaydeep over 4 years ago in reply to Giannis Karachalios

Hi Giannis Karachalios

It's interesting that the device is able to send out packets to correct IP address when in other network but not when connected with AP30. I recommend creating a case with Sophos Support as it's important to check the packet flow and how it is handled by the Sophos UTM. I'd suggest you check the PING from the device to the PC and vice versa. It should give an idea of where it's getting dropped. Please let me know the case ID once you've created.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel