This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos sperrt Ports

Hallo zusammen,

am Samstag haben wir unsere Sophos auf PPPOE Einwahl umgestellt. Es lief auch alles problemlos.

Seit gestern haben wir nun jedoch folgendes Problem, nämlich sperrt die Sophos alle Ports auf dem WAN Interface die von extern kommen. Von Intern nach Extern funktioniert es problemlos.Sobald wir im WAN Interface die Appliance anklicken ist die Sophos auf Port 4444 auch von extern erreichbar.

Google hat uns bereits soweit geholfen, das wir hier anscheinend eine DNAT/Portforwarding Regel brauchen. Diese haben wir auch bereits erstellt jedoch ohne erfolg. Ich hoffe das uns jemand weiterhelfen kann.

This thread was automatically locked due to age.

Parents

0 lferrara over 4 years ago

Steff,

for the DNAT, use this kb:

https://community.sophos.com/kb/en-us/122976

For the Web Interface accessible from WAN (which is unsafe) you can disable it from Administration > Device Access > HTTPS management > WAN Zone.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Steffi Scheu over 4 years ago in reply to lferrara

Many thanks for the quick answer.

We have created everything according to the mentioned KB, but without success. This is exactly our problem, because all ports are still closed.

The webinterface was only opened for testing, and is now closed again.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Steffi Scheu

Go to the console and type:

drop-packet-capture "host 192.168.0.1 and port 443"

and try to connect via HTTPS and post the output.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Steffi Scheu over 4 years ago in reply to lferrara

We have tested this but there is no output on the console.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Steffi Scheu

tcpdump -ni Port2 port 443

Try this.

Change the Port with the WAN Port name.
Cancel
Vote Up 0 Vote Down

Cancel
0 Steffi Scheu over 4 years ago in reply to lferrara

I have tried the tcpdump command.
But i get the error "Unkown Parameter 'Port2'"

With Port1 or Port3 works the command.

I have read we have to set an Alias to the WAN Interface to get the Port Forwarding working? Is this correct?
In the Business Application Rules other people have the option "Forward type". In our XG this is not visible.. is here a failure?
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Steffi Scheu

Please share the output.

You can port forward on alias and on the wan port als.

For WAF, you need to create a Business Application Rule (on version 17.x). On v18, create a Firewall rule and as action use "protect with.."

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Steffi Scheu over 4 years ago in reply to lferrara

Hi Luk,

i have attached you a Screenshot with the error.

Now i have upgraded the XG to 18.0.0 but with no luck.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Steffi Scheu over 4 years ago in reply to lferrara

Hi Luk,

i have attached you a Screenshot with the error.

Now i have upgraded the XG to 18.0.0 but with no luck.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data