SuSE 9.3 Firewall Dropping Connections

mephitic · 09-19-2005, 02:17 PM

I'm running SuSE 9.3 as a router between the following:

eth0 - External Network (Untrusted) - Internet Connection
eth1 - Internal Network 10.62.56.x (Untrusted) - Corporate Connection
eth2 - Internal Network 192.168.66.x (Trusted) - Local LAN

I've allowed access from eth2 to eth1 but NOT eth1 to eth2. If I transfer a large file or a large amount of files from eth2 to eth1 I'll get a message that the share is no longer available.

I'm not seeing any errors in /var/log/firewall

Any idea what would be the problem for the connection loss?

Thanks,
MePH

Matir · 09-19-2005, 09:33 PM

In what way are you allowing this access? Are you allowing established/related packets in both directions? What protocol do you use to transfer the files?

mephitic · 09-19-2005, 09:57 PM

I've allowed all traffic to pass from eth2 to eth1. I'm just using Windows explorer to do a file copy to a network share on a Windows 2003 server.

MePH

Matir · 09-19-2005, 10:03 PM

What are the packet filters configured to do on the firewall? Is there anything significant about when it drops the connection?

mephitic · 10-02-2005, 03:52 PM

Quote:

Originally posted by Matir
What are the packet filters configured to do on the firewall? Is there anything significant about when it drops the connection?

Sorry I dropped the thread for a while .. Got busy ... Anyway I was watching log files today with this and there isn't any errors in /var/log/firewall or a tcpdump. They both just stop collecting data on the transfer.

my ip = 192.168.66.228
server ip = 10.62.56.3

Code:

tail -f /var/log/firewall | grep SRC=192.168.66.228 | grep DST=10.62.56.3

Code:

tcpdump -n -i eth2 | grep 10.62.56.3

Both these just stop dead if I start a file transfer which ends in the share is no longer available.

MePH