Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Sebastien_MSA
New Contributor

Problem in a rule - data reception

Hello everyone,
I'm using a forti #100E 7.2.5 and I'm having problems with a rule (port X to WAN)
I have allowed all traffic from a specific address. In the logs I see that the traffic is authorized, I send data but I receive nothing.
I haven't seen anything specific in the implicit rules and I have the impression that this problem occurred with version 7.2.5.

 

Are you experiencing this type of problem?
Could you give me some advice?
Many thanks
Sincerely
Sébastien

 

2 Solutions
damianhlozano
Contributor

Hello Sébastien!!!

IMHO:

Did you check you are natting what is going to the port X to WAN?

Maybe you can post a debug output to know what is happening, in the case this is an issue in the Fortigate.

In this case, you could enable ping in firewall rules, execute the following commands in the fortigate unit and execute a ping in a computer or whatever:

diagnose debug flow filter clear
diagnose debug reset
diagnose debug flow filter addr x.x.x.x y.y.y.y and 
diagnose debug flow filter proto 1
diagnose debug flow show function-name enable
diagnose debug flow trace start 10000
diagnose debug enable

Note: x.x.x.x and y.y.y.y are the source and destination addresses

 

Regards,

Damián

Damián Lozano

View solution in original post

Damián Lozano
Sebastien_MSA

Hello Damian
Thanks for your feedback.
I managed to unblock the situation, there was a rule blocking the reception.
Thanks again
Sincerely

View solution in original post

2 REPLIES 2
damianhlozano
Contributor

Hello Sébastien!!!

IMHO:

Did you check you are natting what is going to the port X to WAN?

Maybe you can post a debug output to know what is happening, in the case this is an issue in the Fortigate.

In this case, you could enable ping in firewall rules, execute the following commands in the fortigate unit and execute a ping in a computer or whatever:

diagnose debug flow filter clear
diagnose debug reset
diagnose debug flow filter addr x.x.x.x y.y.y.y and 
diagnose debug flow filter proto 1
diagnose debug flow show function-name enable
diagnose debug flow trace start 10000
diagnose debug enable

Note: x.x.x.x and y.y.y.y are the source and destination addresses

 

Regards,

Damián

Damián Lozano
Damián Lozano
Sebastien_MSA

Hello Damian
Thanks for your feedback.
I managed to unblock the situation, there was a rule blocking the reception.
Thanks again
Sincerely

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors