VLAN DMZ ERROR RULES

[Cochino44]

Hello evryone, here i'am with this next issus. We are working in the fortinet client with acces to the internet , but we cant get out to IP 185.103.36.109. According to the menssage we have problem in the policies but ours policies its fine, from 192.168.77.4 to 185.103.36.109

func=vf_ip_route_input_common line=2596 msg="find a route: flag=80000000 gw-185.103.36.109 via root"
id=20085 trace_id=3008 func=fw_local_in_handler line=432 msg="iprope_in_check() check failed on policy 0, drop"

What do you think about this? , do you need any more about this problem? 

Ty a lot

[akristof]

Hello,

Do you have this 185.103.36.109 as VIP or IPPOOL configured?

[ntaneja]

Hi Cochino44

func=vf_ip_route_input_common line=2596 msg="find a route: flag=80000000 gw-185.103.36.109 via root"---FGT is trying to send traffic to itself as its searching route via root(this means that this public IP is configured in some part on FGT)
id=20085 trace_id=3008 func=fw_local_in_handler line=432 msg="iprope_in_check() check failed on policy 0, drop"

Doc for error:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-debug-flow-messages-iprope-in-check-...

Thanks