Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 17 replies
  • Subscribers 7 subscribers
  • Views 12841 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Internet

Don Fisher1

 I have installed UTM 9 on an old Dell XPS 435MT that was in service until recently and I am pretty confident that all the hardware is functioning correctly.  I followed the wizard that comes after the install and I am getting no internet access.  I have done a couple of reinstalls just because I like repetitive activity and followed this guide a couple of times http://techbast.com/2015/03/perform-a-basic-configuration-sophos-utm-in-12-simple-steps.html with no love.  I can ping google.com, but that's it - no other internal or external addresses will respond.  I have the machine installed behind my router and unmanaged switch and I am getting a dynamic IP Address, so at least that is working.  Also, both interfaces show as 'UP'.  Live firewall log shows solid red.  Any assistance anyone could provide would be greatly appreciated.

Here are a few shots of my configuration:



This thread was automatically locked due to age.
  • 0

    Hey Don,

     

    if Masquerading, DNS and so on is working correctly it could be a Firewall Rule issue. Since everything in your Pictures are Default Drops post a picture of your Firewall Rules please.

     

    Regards

    Jason

    Regards

    Jason

    Sophos Certified Architect - UTM

  • 0 in reply to Jason Klein

    Hey Jason.  Thanks for the quick response.  Firewall rules are the canned ones generated by the wizard.

     

  • 0 in reply to Don Fisher1

    Hi Don,

     

    Why has your Internal Network the same Network Range as your WAN?

    both are in 192.168.1.0 /24 Network range.

     

    Regards

     

    Jason

    Regards

    Jason

    Sophos Certified Architect - UTM

  • 0 in reply to Jason Klein

    My WAN really isn't my WAN.  I have the UTM set up behind my gateway.  I turned DHCP off on the the UTM and I am using DHCP from my gateway router.  I thought that might be an issue, so I connected the UTM right behind my modem and got exactly the same results.  I thought that maybe there was a problem with one of the NIC's maybe only getting traffic one way, so I reinstalled and swapped the position of the cards in the interface (not physically) so that the traffic would run the other way.  Same symptoms.

  • 0 in reply to Don Fisher1

    Hi Don,

    i also have alot of configs where the UTM is behind a gateway with DHCP but the WAN always uses are different IP Range, like this:

    then u need a Masquerading Rule as well

    Regards

    Jason

    Sophos Certified Architect - UTM

  • 0 in reply to Jason Klein

    I have the Net MASQ rule I think:

     

     

    If I set a different subnet like that, will machines on both still be able to talk?  I guess it does not matter really, so long as I can get it to work.  In the end, I want this to be right behind my modem with all of my traffic running through it, but I have to get it going first before i take my entire network down.  But I am not certain that this will make a difference.  I had it set up right behind the modem already and the UTM box received my public IP address from my ISP, but I still was not able to get to the internet.  I will try again.

  • 0 in reply to Don Fisher1

    Hey Don,

     

    well the only thing i see (its already late night here bit tired ;) ) is the same subnet for internal and external i never did that so i dont know the symptoms.

    Because if Masquerading is translating IP Addresses into Public if both ranges are the same i dont know how this is supposed to work. I could be wrong tho

     

     

    Regards

    Jason

    Regards

    Jason

    Sophos Certified Architect - UTM

  • 0 in reply to Jason Klein

    So, I changed the UTM Network IP range to be 192.168.2.0 and the webadmin access to 192.168.2.100 and I have the same issue.

  • 0 in reply to Don Fisher1

    A little more information.  I thought maybe reaching the internet from the same machine that I am accessing webadmin was not possible, so I turned on DHCP, connected a switch between the UTM and the webadmin machine.  Then I connected another machine and got an IP Address (192.168.2.101) but still no internet.  When I try to open a web page, I get a page generated by the UTM saying that the network is not available.

  • 0 in reply to Don Fisher1

    More fiddling.....I got a completely different box set up and ran through the installs - both the wizard and the install detailed here http://techbast.com/2015/03/perform-a-basic-configuration-sophos-utm-in-12-simple-steps.html and have the exact same results.  The firewall live log is solid red.  Both internal and external interfaces are showing traffic, but no internet.  Using Support > Tools > Ping Check I can ping 8.8.8.8 and google.com.  I can also ping the web admin address internally as well as machines that are on the internal network, but different subnet (Sophos box is 192.168.2.100 and everything else is 192.168.1.x), but all other external pings are 100% loss.

    This has to be something silly that is being overlooked.  Why is the firewall dropping all traffic when it is set to Sources > Internal (Network), Services > Any, Destinations > Any?

    Thanks in advance to anyone with any insight.

     

    Don F.

Unfiltered HTML