SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0004470: Inter-zone Traffic And Policy Routing Issue - MantisBT Endian Bugtracker
Endian Issue Tracker





Please see now our new Bugtracker system: JIRA








View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0004470Endian FirewallNetwork related (VPN, uplinks)public2012-10-19 10:032012-12-04 04:27
ReportermhLearn 
Assigned To 
PrioritynormalSeverityminorReproducibilityalways
StatusnewResolutionopen 
PlatformOSOS Version
Product Version2.5 
Target VersionFixed in Version 
Summary0004470: Inter-zone Traffic And Policy Routing Issue
DescriptionHi,

Not sure if this is a bug or it was supposed the way on version 2.5.1.

Traffic from Orange zone to Green zone on open ports was failed when Policy Routing was applied to Orange zone too.

By just setting up a rule on Inter-zone Traffic, where
            Orange -> Green, <ports>
the traffic would be dropped, as logged in firewall log as "ZoneFW.Drop"

To solve this, do following,

1. Setup Static Routing, and enable it
      Source Network: <Orange Zone Net IP/CIDR>
      Destination Network: <Green Zone Net IP/CIDR>
      Route Via -> Static IP : <Green Zone Gateway IP>

2. Setup Inter-zone Traffic, and enable it
      Orange -> Green, <ports>

3. Apply the Policy Routing that you want

Doesn't matter of the steps sequence, once all setup properly, it would work.

 
Additional InformationIn my case, Endian Firewall was setup with BLUE, ORANGE and GREEN Zones.

The Policy Routing was setup to divert all traffic from ORANGE and BLUE zone to use 2nd uplink connection, where GREEN zone was using main uplink card.
Tagsinter-zone traffic, policy routing
Attached Files

- Relationships

-  Notes
There are no notes attached to this issue.

- Issue History
Date Modified Username Field Change
2012-10-19 10:03 mhLearn New Issue
2012-12-04 04:27 mhLearn Tag Attached: inter-zone traffic
2012-12-04 04:27 mhLearn Tag Attached: policy routing

Copyright © 2005-2008 Endian, SRL. All rights reserved.


Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker