RV082 Firewall stops some intended traffic

Setup:
Public address on WAN1 of RV082
LAN1 on LAN of RV082 in gateway mode.
LAN1
MPLS link via RV042#1 and RV)42#2 on "interim" LAN2
LAN1 on WAN1 of RV042#1 in router mode.
LAN2 on LAN of RV042#1
(link)
LAN2 on WAN1 of RV042#2 in router mode.
LAN3 on LAN of RV042#2.
LAN3
All LANs have private addresses
"I think* With type 2 hardware, this sort of arrangement seemed to work OK.
With type 3 hardware in the RV082, if the firewall is turned on then internet traffic to LAN1 works fine as expected.
But traffic to LAN3, while working from LAN1 just fine, is blocked from internet communications.
Any suggestions why or how to deal with it?

Hello Te-Kai Liu,
I tried to set up rules as you explained in a RV042 using the latest available firmware and configured as gateway.
Unfortunately things do not seem to work as expected. I want to be able to accept and forward ssh connections originated from ip1 only. An ssh connection from a different ip address must be rejected. So I setup:
- port 22 forwarding to my internat ssh server, it works
- a first rule (priority 1) allowing ssh requests from ip1 on port wan1`to be accepted. More precisely:
Priority
1
Enable
Yes
Action
Allow
Service
SSH [22]
Source Interface
WAN1
Source
ip1~ip1
Destination
wan1_ip~wan1_ip
Time
Always
- a second rule (priority 2) denying any ssh on port wan1:
Priority
2
Enable
Yes
Action
Deny
Service
SSH [22]
Source Interface
WAN1
Source
any
Destination
wan1_ip~wan1_ip
Time
Always
With this configuration, every external ip (and not only ip1) get ssh redirected, so it's not filtered out.
If I modify the DENY rule changing Destination from "wan1_ip~wan1_ip" to "any" (I don't even know if such a rule is meaningful), then EVERY ip (including ip1) get discarded when trying to ssh-connect.
So I'm unable to setup proper ip-based firewalling. Can you help please?
Thanks a lot,
Alberto

Similar Messages

RVL200 IPSEC: Channel all or some data traffic through tunnel, possible?

Is it at all possible to channel all/some data traffic through an established ipsec tunneled connection using the RVL200?
I have successfully established an ipsec connection through RVL200 and RV042 routers and are able to connect to servers/computers behind it.
Now I want to channel all or some traffic through the ipsec-tunnel for computers that reside on 192.168.1.0 subnet of RVL200 network.
Main office - RV042 router - 10.200.62.1
Remote office - RVL200 router - 192.168.1.1
I am trying to use the Advanced Routing option to add static routes but I am not 100% sure if I am configuring the routes correctly.
To give an example of routing DNS requests for HOTMAIL.COM [65.55.72.183]:
Destination IP - 65.55.0.0
SM - 255.255.0.0
GW - 10.200.62.1
Hop - 1
Interface - LAN
For some reason this does not appear to work. I have also tried using the interface setting of WAN and tested - this also does not work.
Can this be done? If anyone has tried doing this I would be very interested in finding out how to configure this.
Cheers.
MP

For some reason the DNS IP settings does not seem to work.
I started looking at the option of using the Quick VPN client which appears to have a setting for enabling Remote DNS.
I have setup a test user on both the RV042 and RVL200 to test if I can overcome the Split DNS limitation. But for some reason I can't connect to either of the two routers. I have installed the client on a 64bit Windows 7 client machine which has the Windows Firewall service enabled.
I keep getting the below error, there is no conflict with the IP address scheme and the password is correct.
Could it be this new client does not support the older Linksys badged RV0xx routers? Because Split DNS is only supported on v3 hardware. The firmware on my RVL200 is v1.1.12 .1.
What should I check to enable connectivity using this client? Or is because it does not support 64bit WIndows 7? I have even exported the certificates for both Admin and User into the C:\Program Files (x86)\Cisco Small Business\QuickVPN Client folder.

HT4914 I often record songs at a particular tempo, iTunes Match will then match it and send it back to me at the original tempo, is there anyway I can stop some songs from being matched. At the moment I have turned match off. But I would like to sync play

I often record songs at a particular tempo, iTunes Match will then match it and send it back to me at the original tempo, is there anyway I can stop some songs from being matched. At the moment I have turned match off. But I would like to sync playlists.

How old was this backup? It sounds like it was at least several weeks old.
You can look directly in the TM backup for the music.
1. Connect to the external HDD the backup is kept on.
2. Open a Finder window and select the backup drive in the left hand panel. Double click into the folders until you see a list of folders with dates.
These are the incremental backups. You can start at the top or the bottom of the list but I suggest you double Latest/<HDD Name>/Users/<Account Name>/Music/iTunes/iTunes Media/Music. From this location you can start looking for the "missing" music. When/if you find it you can simply drag-n-drop to ~/Music/iTunes/iTunes Media/Music on the internal HDD.
If the music is actually not in the backups (for whatever reason) then you've got a problem.
You can download the uploaded files from the cloud by deleting the affected tracks from the iTunes library (but not the cloud!), highlighting multiple tracks at once, right-clicking and choosing "download."

NVidia firewall stopped working after nForce drivers upgrade

Just for the record, my nVidia firewall stopped working after I "upgraded" from nForce 4.08 (came with the mobo cd) to 4.24 (latest drivers at the nVidia website).
...damn nVidia.
Anyone else have this problem?

Thanks for the reply. I tried -- to an extent -- what you suggested. Thinking nVidia was smart I went on to installing the 4.24 without removing previous drivers/components. Everything installed except for the network/firewall stuff. I clicked "yes, install nVidia network stuff" and a fatal error occured a few seconds into the installation. I then proceeded to uninstalling the network access manager, followed by a retry of the 4.24 installation: same problem.
However, I never uninstalled the nForce drivers themselves. I will redownload the 4.24 .exe, uninstall everything, and run the .exe. I'll then proceed to report my crappy results here, in this forum.

In random mode i tunes stops some songs before they are finished. How do I fix that?

In random mode, itunes stops some songs before they are finished. How do I change the ending point of a song in itunes?

If your country's iTunes Store allows you to redownload purchased tracks, I'd delete your current copies of the dodgy tracks and try redownloading fresh copies. For instructions, see the following document:
Downloading past purchases from the App Store, iBookstore, and iTunes Store
Otherwise, I'd report the problem to the iTunes Store.
Log in to the Store. Click on "Account" in your Quick Links. When you're in your Account information screen, go down to Purchase History and click "See all".
Find the items that are not playing properly. If you can't see "Report a Problem" next to the items, click the "Report a problem" button. Now click the "Report a Problem" links next to the items.

Stop some unnecessary services when system boots

how can I stop some unnecessary services when system boots? I tried to find this function in the control center, but it looks we can modify the services list directly in the control center.

edit the DAEMONS= line in /etc/rc.conf

TS1424 I bought an album that also came with music videos. All the songs downloaded properly, but none of the videos. Next to them it said Stopped-Error 3150, I tried to restart the downloads and now most just say Stopped, some say Stopped-Error 8003. Hel

I bought an album that also came with music videos. All the songs downloaded properly, but none of the videos. Next to them it said Stopped-Error 3150, I tried to restart the downloads and now most just say Stopped, some say Stopped-Error 8003, which means Network issues, but after checking, I found there are no issues with my network. Help?

I am having this same problem with my brand new Mac Pro. It seems to be tied to the computer awaking from sleep (no I am not leaving the iPod connected while sleep... I am referring to waking the computer from sleep and then connecting iPod as opposed to restarting the computer and then connecting the iPod). In other words, if you are getting this error message, try ejecting the iPod, restart your computer, then connect the iPod and see if the error message goes away. For me it does, but I only get one shot at it, if I eject the iPod and then reconnect it, the error message returns. This happens on both iPods I have. I have rebooted (hold menu-select) and gone to disc mode (hold select-play) and the error message remains. The only way it goes away is to reboot the computer, then I get one shot at hooking up an iPod.
I NEVER had nor get this error message when I connect to the Windows PC that I started with. Perhaps the iPod does not like moving from PC to Mac?

Firewall stops Firefox from loading any websites... had to switch off security to send this message... How can I fix this? Am using Symantec Client Firewall

Firewall stops Firefox from loading any websites... had to switch off security to send this message... How can I fix this? Am using Symantec Client Firewall

This forum is only for discussions on the forums themselves. You should post your question in the apropriate product forum,
http://forums.adobe.com/community/shockwave
if your ptoblem is with Shockwave, or
http://forums.adobe.com/community/flashplayer
if it affects Flash Player.

HT2515 How do I stop some one from contacting me?

How do I stop some from contacting me on ichat?

Hi,
In an AIM Buddy list.
Go to iChat Menu > Preferences > Accounts and then the specific account > Security tab
In here select Block specific People and add the Screen name of the person you want to block.
If Jabber (Googletalk, Facebook or other) and if they are already in your Buddy List then Right click them to Remove them or use the Buddies Menu and De-Authorise them.
Basically AIM allows anyone to "call" your Screen name and only the Block or the restricted Allow options are the way to control who can contact you.
With Jabber they can Invite you to be a Buddy but if they are not Authorised (and then in the list) they cannot send you messages.
8:18 pm Wednesday; December 4, 2013
 iMac 2.5Ghz 5i 2011 (Mavericks 10.9)
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb (Snow Leopard 10.6.8)
 Mac OS X (10.6.8),
 Couple of iPhones and an iPad

I would like to know how i stop some albums ive bought from transfering to my iphone i delete them from itunes but when i sync my phone they transfer from my iphone this is a pain some one please help!!

I would like to know how i stop some albums ive bought from transfering to my iphone i delete them from itunes but when i sync my phone they transfer from my iphone this is a pain some one please help!!

Burb79 wrote:
I thought of that one two tried it but still no joy. I have an ipad2 as well which I set up to not sync any music to it but for some reason the albums have got onto that as well. im thinkin its somthing to do with the dam cloud thing
Go to Settings/ Store and under the category "Automatic Downloads" you can turn OFF the automatic download of purchases to your device (this needs to be done for each device). There's also a setting in iTunes just for automatic pushes to your iTunes library.
To remove a purchase you've made directly to your device, you can either:
a- Swipe across the song title from left to right and press Delete, or
b- If you auto-sync your device, connect to iTunes and click on the Music tab where you define your sync settings (the Music tab is to the right of the overall Summary page of your device). At the bottom of the Music tab you'll see direct purchases that are on your device -- simply un-check those and click "Apply" or "Sync" to remove them.
c- If you manually manage music on your device, connect to iTunes and click the small arrow to the left of your device name, and then click on the Music folder under your device. Then navigate to the item(s) you want to remove and then delete them.
To prevent things from syncing from your library to your device, there are many ways to do that (un-checking things in your library is one way, but not the best IMO). Might want to read the manual or some online tutorials on iTunes if you want to learn more.

Starting iTunes stops all net traffic

Hi,
When I start iTunes, all internet traffic stops, and I have to reboot my laptop to get back online.
I have a XP sp2 laptop, with the latest version of iTunes, which has been working fine for the last year or so. I haven't changed anything that should make a difference for this. I'm on broadband. Any ideas on how to stop getting knocked offline when iTunes starts?
Thanks,
Ed
Windows XP

I just thought of something: this week I had installed the latest version of Skype too. I've just tried downloading podcasts again, and it seemed to knock me offline again....but then I quite Skype, and it I've come back online again! So maybe there is some conflict between Skype and iTunes! I'll have to test this out a couple more times to be sure, but it is one possibility.

Stopping some family members using my internet!!!

my problem,
i have a 20 step son i want to stop their access to my internet network,
if i change the password on my wifi all he will do is reset it in some way and get back on ( yes he is a clever little so and so )
what i want to know if i bought the express, would i be able to set an "administor" on the settings that even if you unplugged the express the settings could only be changed by me on my mac?
or is there a way of barring his windows based laptop or even better , his laptop and his iphone,
if the express cant do it could the extreme,
im will to pay the money if its possible
i know this sound petty but he doesnt pay me for it and he clogs up the network for everyone else in the house that needs it

Stuart,
I assume throwing him out or breaking his wrists are not option
When you say reset the password - do you mean the AIrport network password or the actual Airport Extreme/Express passwords?
If the former you could change the Airport devices to be in a closed network so you can specify exactly which MAC addresses can connect.
In either case do you know how he gains access to the passwords? If he is hard resetting the base stations I'm afraid the only way to limit his access is to physically secure the devices.
Regards,
Shawn

How to stop some apple id call my apple id and/ or my phone number by face time

Hi there, my niece lost her iPod touch at school and in there had my phone number and my apple Id. Unknow people stolen the iPod keep calling me by face time even I changed my apple id. Can someone help me to stop them bother me like that way. They cover their face by blanket and talk crazy, if I do not accept,they will call me again and again. I am stuck ! Help me please !

You can delete the iCloud account from her phone by going to Settings>iCloud, scroll to the bottom and choose Delete Account. I believe you will get a prompt asking if you want to remove or keep the data on the phone; if you don't want your contacts on her phone choose delete. As far as the contact on your old SIM card, if it is the same size as the iPhone SIM card you can put it in the iPhone and import the contacts (see http://support.apple.com/kb/HT4994). If the SIM card won't fit, then you would need to either export the contacts to your computer using appropriate software, upload your contacts to a cloud service so you can download them to your computer, or in some cases take it and your iPhone to your retailer and ask them if they can do the transfer for you. (It's also possible to cut a SIM card down to fit but it can be tricky to get it right. There are articles on this if you search with Google.) This video might help: http://www.youtube.com/watch?v=ypZpYNpfa9E.

We were wondering how you stop some apps from running with out deleting them something like a task manager and in my settings im missing the application button in it how do i get it back and stop some apps its making it run really slow

how do you stop apps with out deleting them i have looked for something like a task manager and nothing and researched about it and it says to go into your settings and then click applications but i dont have one can someone please help[ me thank you

Double click the Home button. The bottom row shows the recently used apps. Touch and hold the app until they all start to wiggle then tap the circled minus sign by apps you want to remove. Press the Home button to return to normal.
However, that is recently used apps not apps doing something. Some apps will do things all the time/periodically like checking for Notification, new mail. Yu can turn those off in the apps themselves.
Just what are you trying to accomplish?

Firewall blocks some services when sharing internet connection

Hello,
I have some issues regarding internet sharing that I hope someone could successfully troubleshoot :
2 computer, iMac G5 2.0 and an original "17 PowerBook G4 1.0, both running 10.4.7.
The iMac is connected to the internet via Ethernet and shares its connection with the PB using the Airport.
The problem is that when the Firewall is enabled (just using the built-in one) the shared connection is limited for only few services :
Web browsing, iPhoto and iTunes Bonjour sharing, Apple Remote Desktop all work smoothly while iChat, MSN Messenger, Bittorrent clients can't connect and Mail can't go Online (can't connect to my Gmail accounts). Since even enabling all default services in the list doesn't help the only solution is to completely disable the Firewall in the iMac. When the Firewall is off everything goes back to normal.
I tried to isolate the problem but I can't get my finger on the right ports to open.
I tested sharing the connection through Firewall instead but it's the same so It's definitely not related to the type of connection used to connect the two computers one to the other. It is strictly related to the Firewall.
I found two Apple documents :
http://docs.info.apple.com/article.html?artnum=107653
http://docs.info.apple.com/article.html?artnum=107594
I carefully followed the instructions but it didn't resolve the problem.
From reading the first document I learnt that port 443 is related to the Secure Sockets Layer service so I searched Apple document http://docs.info.apple.com/article.html?artnum=106439 for other ports related to that service but since I'm not an expert I couldn't figured it out right by myself.
Setting for the iMac side are as followed :
Network panel : Airport is active. (as recommended in http://docs.info.apple.com/article.html?artnum=107594 I set Airport to the highest port priority).
Sharing panel/Services : Personal web sharing is set to ON. As I mentioned before even enabling all default services in the list doesn't help.
Sharing panel/Internet : Internet sharing is ON. "Share your connection from" is set to Airport. "To computers using" : Airport checkbox checked. I tried the Firewall option instead as well.
Appleshare is ON and automatically configured (zero configuration in the Firewall) on both macs.
Ports for iChat, MSN and Gmail on the iMac side are open. iMac has no problem to connect to these services directly.
On the PB side turning the Firewall on or off resulted the same.
Could someone please help me to configure the Firewall so it won't have to be always turned off?
Your help is much appreciated
Elad
Original PowerBook "17/iMac G5 2.0 "20 Mac OS X (10.4.7)

In the Sharing pane of System Preferences, click the Advanced button under the Firewall tab, enable firewall logging, and then try using those services on the other computer. When done, check the firewall log and look for the number after the : in the logged entries; this is a port number. Knowing the IP address of the other machine will help determine which entries were produced by it as opposed to ones which came from the Internet; this is visible in the Network pane of System Preferences.
(15371)

RV082 Firewall stops some intended traffic

Similar Messages

Maybe you are looking for