
Hello friends, Some of you uses firewall On CD? I have a problem without solution, is the following one: The Firewall On CD me left it formed and working, everything without problems, until the last week in which they brought to the company an equipment Infogate 3020 for telephon calls by IP (between us, it works excellent). Profit not to cause that this equipment Infogate works after my firewall, I don`t have the support of the supplier. Without firewall the equipment this works perfectly. What I must do is to allow that firewall lets pass the packages for ports UDP 1588, 6024 and 8481 TCP and forward to the 192,168,0,48 IP commit (IP of infogate), this me says the people to it who provide infogate. Thanks to all,

Hello friends, Some of you uses firewall On CD? I have a problem without solution, is the following one: The Firewall On CD me left it formed and working, everything without problems, until the last week in which they brought to the company an equipment Infogate 3020 for telephon calls by IP (between us, it works excellent). Profit not to cause that this equipment Infogate works after my firewall, I don`t have the support of the supplier. Without firewall the equipment this works perfectly. What I must do is to allow that firewall lets pass the packages for ports UDP 1588, 6024 and 8481 TCP and forward to the 192,168,0,48 IP commit (IP of infogate), this me says the people to it who provide infogate. Thanks to all,
I should start off by saying I'm not familiar with the firewall on CD but since it uses IPTABLES it shouldnt' make a difference. The following rules will have to be added manually unless the CD allows some configuration file. $EXTIF= your internet interface IPTABLES -A INPUT -i $EXTIF -p udp --dport 1588 -j ACCEPT IPTABLES -A INPUT -i $EXTIF -p udp --dport 6024 -j ACCEPT IPTABLES -A INPUT -i $EXTIF -p tcp --dport 8481 -j ACCEPT $DMZIF= Interface connected to your equipment (assuming it has a public IP) $IPTABLES -A FORWARD -i $EXTIF -o $DMZIF -j ACCEPT If your equipment IP isn't public you will have to do a dnat but you will have to research that on your own.
participants (2)
-
Lucio Solorzano
-
studio3arc.com Admin