This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UDP source port 0

Hi,

I have to open a connection from UDP source port 0 to UDP destination port 8254.

But the lower service port I can define is 1.

All the packets are always dropped.
2012:11:16-18:30:13 fw ulogd[4600]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth1" mark="0x1000" srcmac="0:22:90:c6[:D]b[:D]a" dstmac="0:c:29:78:5d:34" srcip="178.237.87.12" dstip="10.10.10.10" proto="17" length="1344" tos="0x00" prec="0x00" ttl="61" srcport="0" dstport="8254"

Any idea on how to do ?
Thank you
Regards,
Romano

This thread was automatically locked due to age.

0 Ol Deda over 11 years ago

you can't define "any" because it's predefined, you just drag it from the left hand
Cancel
Vote Up 0 Vote Down

Cancel
0 rbanchieri over 11 years ago

Humm, it's "any" protocol, not "any" port, and it is for source and destination together.
And it is not possible to use it on a NAT rule.
And even with any protocol, I have a "default drop".
Thank you Olsi for the idea.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi,
1. I would recommend creating a Feature Request at UTM (Formerly ASG) Feature Requests: Hot (1081 ideas)

2. open a support case with your reseller or premium support

3. Meanwhile, you can try creating a Service Definition for IP Protocol 17, which should match ALL UDP.
Tie that to a PacketFilter rule with the Source IP and/or Destination IP defined, and it should work, although it won't be locked down as much as it should be.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 rbanchieri over 11 years ago

Thank's Barry for the suggestion.
It works when I have open all UDP, like you suggest, between the two IP addresses.

Romano
Cancel
Vote Up 0 Vote Down

Cancel