Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 16 replies
  • Subscribers 3 subscribers
  • Views 65626 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Please help: All DNAT rules suddenly stopped working, affecting remote access and external access

traderjay

Hey Guys – I am completely stumped and need some help! All of sudden my DNAT rules stopped working and it is affecting my remote desktop, Plex server and CCTV camera access from outside of the network. Below is a screenshot of my current firewall and DNAT rules.

I’ve not touched them for months and everything is working perfectly until applying the recent updates. As you can see, I even Any->Any rule to isolate the problem without much success :(

 

 

 

This is the firewall log when I try to use remote desktop:

2016:10:03-12:17:44 homestation ulogd[4782]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth0" srcmac="00:25:90:f4:54:61" srcip="204.79.197.200" dstip="192.168.1.101" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="443" dstport="64961" tcpflags="RST"

 

This message comes up when I try to access my Plex Server remotely:

2016:10:03-12:24:44 homestation ulogd[4797]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" srcmac="02:ff:70:00:07:0b" dstmac="00:25:90:f4:54:61" srcip="192.168.1.118" dstip="192.168.1.199" proto="17" length="30" tos="0x00" prec="0x00" ttl="64" srcport="23235" dstport="5351"

 

 



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    Sometimes a firmware upgrade effects the residing configurations in UTM. The first and foremost step after an update is to restore a backup from the previous version. Can you try that and update us if the issue resolves? 

    Contrary to this, I am unable to understand why all the ports are mapped with the DNAT rule 3, always map required ports or have an additional IP on such requirement.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to sachingurung

    I tried the restore process and I am still unable to access the server from outside of the network. Can you also clarify what do you mean by:

    "Contrary to this, I am unable to understand why all the ports are mapped with the DNAT rule 3, always map required ports or have an additional IP on such requirement."

     

     

    Just to confirm is the backup/restore tool accessed via this page and clicking on the highlighted green arrow:

    I just get logged out of the UTM but I am not sure if the restore process is successful.

    sadfa

  • 0 in reply to traderjay

    Please help me out guys :( This is causing major issues. Will re-installing Sophos UTM and reloading the config help?

Reply Children
No Data
Unfiltered HTML