This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RULE 0 , INVALİD TRAFFİC, BUT THOSE IP IS IN THE SAME LAN.

Hello everyone,

I have a problem with my XG Firewall. The exchange server tries to send a packet for the firewall but this packet denied and its called invalid traffic which is used "0" rules.

Actually those servers run in the same LAN. Sophos firewall gives me an error message. It is "Could not associate packet to any connection". I want to get to help with this issue. Thank for reply.

Best Regards

This thread was automatically locked due to age.

Parents

0 lferrara over 4 years ago

Furkan,

please share the screenshot of the logs get denied.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Furkan Araci over 4 years ago in reply to lferrara

Thank you for the reply , I put this image, Hopefully, you can see this log.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Furkan Araci

Hi,

that looks the wrong way, eg you are not sending 443, your service definition looks to be in reverse.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Furkan Araci over 4 years ago in reply to rfcat_vk

Hi, Thanks for the reply ,

May you try to explain more?

How will do the task be in reverse?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Furkan Araci

Hi,

if you look at the log entry you are sending 443 to be NAT'ed to 5xxxx which the receiving server will not know what to do with.

Pleas port your mail rules.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 4 years ago in reply to Furkan Araci

Hi,

if you look at the log entry you are sending 443 to be NAT'ed to 5xxxx which the receiving server will not know what to do with.

Pleas port your mail rules.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Furkan Araci over 4 years ago in reply to rfcat_vk

Hi,

I have a rule for an email in the XG firewall.

This rule considers email which is coming to my local area. Just 443,587,25 port number open.

so WAN TO LAN.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Furkan Araci

Hi,

you will need a WAF rule to cover unsolicited incoming traffic going to your server and LAN to WAN rule for outgoing traffic, 465,587 and 25 from your server.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel