ddrueding
Fixture
I just swapped out the FatPipe for a Netgear ProSafe SRX5308 Quad-WAN router. Working great. Only issue is that there is one service that I need to forward from the outside.
Objective: Forward traffic on port 90 to internal IP address 192.168.0.18
Steps taken:
1. Under "Security"->"Services", create a new service.
2. Under "Security"->"Firewall", under the "Inbound Services", add a rule that sends the new service to the target IP from the relevant WAN.
3. Under "Monitoring"->"Firewall Logs & E-Mail", set the log to record incoming connections.
4. Click on "View Logs" -> "Clear Log"
5. Attempt Connection from outside.....fails "Cannot connect"
6. In log screen, click "Refresh Log"
7. Move client inside firewall and confirm connection (done)
Anyone have experience with this? It looks like it is allowing the connection, but I don't know what the cache flow error is. Googling leads a lot of places, but none of them seemed to be my circumstance. I'm running a newer firmware (4.2.1-2), and will try the latest after hours.
Objective: Forward traffic on port 90 to internal IP address 192.168.0.18
Steps taken:
1. Under "Security"->"Services", create a new service.
2. Under "Security"->"Firewall", under the "Inbound Services", add a rule that sends the new service to the target IP from the relevant WAN.
3. Under "Monitoring"->"Firewall Logs & E-Mail", set the log to record incoming connections.
4. Click on "View Logs" -> "Clear Log"
5. Attempt Connection from outside.....fails "Cannot connect"
6. In log screen, click "Refresh Log"
Code:
Tue Dec 3 12:59:51 2013(TZi-) [SRX5308][Kernel][KERNEL] WAN_LAN[ACCEPT] IN=WAN OUT=LAN SRC=72.14.90.11 DST=192.168.0.18 PROTO=TCP SPT=49395 DPT=90
llocate flow info buffer
Tue Dec 3 12:59:46 2013(TZi-) [SRX5308][Kernel][KERNEL] WAN_LAN[ACCEPT] IN=WAN OUT=LAN SRC=72.14.90.11 DST=192.168.0.18 PROTO=TCP SPT=49395 DPT=90
llocate flow info buffer
Tue Dec 3 12:59:41 2013(TZi-) [SRX5308][Kernel][KERNEL] WAN_LAN[ACCEPT] IN=WAN OUT=LAN SRC=72.14.90.11 DST=192.168.0.18 PROTO=TCP SPT=49395 DPT=90
uppressed.
Tue Dec 3 12:59:41 2013(TZi-) [SRX5308][Kernel][KERNEL] cvm_ipfwd_cache_flow: Failed to allocate flow info buffer
Tue Dec 3 12:59:41 2013(TZi-) [SRX5308][Kernel][KERNEL] cvm_ipfwd_cache_flow: Failed to allocate flow info buffer
7. Move client inside firewall and confirm connection (done)
Anyone have experience with this? It looks like it is allowing the connection, but I don't know what the cache flow error is. Googling leads a lot of places, but none of them seemed to be my circumstance. I'm running a newer firmware (4.2.1-2), and will try the latest after hours.