[FW-1] Re: [FW-1] Réf. : [FW-1] SecuRemote/Netgear /Cable Modem question

[The Lahrs <johnjan@FW1-NOSPAMLAHR.ORG>]

Hi Ivan,

I've opened all ports in Menu 15.  Shouldn't this open ports
256 /264?  I also turned off all filters in Menu 21.

 Menu 15 - SUA Server Setup

               Rule   Start Port No.   End Port No.   IP Address
              ---------------------------------------------------
                 1.    Default          Default        0.0.0.0
                 2.      2                65000        192.168.0.12
                 3.      0                0            0.0.0.0
                 4.      0                0            0.0.0.0
                 5.      0                0            0.0.0.0
                 6.      0                0            0.0.0.0
                 7.      0                0            0.0.0.0
                 8.      0                0            0.0.0.0
                 9.      0                0            0.0.0.0
                10.      0                0            0.0.0.0
                11.      0                0            0.0.0.0
                12.      1026             1026         RR Reserved

                        Menu 21.1 - Filter Rules Summary

 # A Type                       Filter
Rules                              M m n
 - - ---- ---------------------------------------------------------------
- - -
 1 N IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0,
DP=137                            N D N
 2 N IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0,
DP=138                            N D N
 3 N IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0,
DP=139                            N D N
 4 N IP   Pr=17, SA=0.0.0.0, DA=0.0.0.0,
DP=137                           N D N
 5 N IP   Pr=17, SA=0.0.0.0, DA=0.0.0.0,
DP=138                           N D N
 6 N IP   Pr=17, SA=0.0.0.0, DA=0.0.0.0,
DP=139                           N D F

            Menu 21.2 - Filter Rules Summary

 # A Type                       Filter
Rules                              M m n
 - - ---- ---------------------------------------------------------------
- - -
 1 N IP   Pr=17, SA=0.0.0.0, SP=137, DA=0.0.0.0,
DP=53                    N D F
 2 N
 3 N
 4 N
 5 N
 6 N
                        Menu 21.3 - Filter Rules Summary

 # A Type                       Filter
Rules                              M m n
 - - ---- ---------------------------------------------------------------
- - -
 1 N IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0,
DP=23                             N D N
 2 N IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0,
DP=21                             N D N
 3 N IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0,
DP=80                             N D F
 4 N
 5 N
 6 N

With these changes it seems the Netgear RT314 should not do any
filtering and should allow all ports to reach my computer, which
is 192.168.0.12.  However neither ping nor telnet will work if SecuRemote
is turned on.  If I remove the RT314 from the system, then both ping
and telnet do work with SecuRemote.

To summarize the ping results:
Without SecuRemote, without RT314                     Ping works
Without SecuRemote, with RT314                          Ping works
With SecuRemote, without RT314                          Ping works
With SecuRemote, with RT314                               Ping fails.

Any thoughts or advice on this would be much appreciated!

Thanks,
John

At 01:53 AM 12/23/2001 , you wrote:
> Hello
>
> In your rt314, you should have a look to filter set configuration and open
> securemote topology ports 256 /264
> There is the default filter 3 that could also limit your communication
> abilities.
> # A Type                       Filter Rules                     n
> - - ---- ---------------------------------------------------------------
> 1 Y IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23                    N
> 2 Y IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=21                    N
> 3 Y IP   Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=80                    F
> 4 N
> 5 N
> 6 N
>
> HTH
> Ivan
>
> The Lahrs <johnjan@LAHR.ORG>
> Envoyé par : Mailing list for discussion of Firewall-1
> <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
> 23/12/2001 07:22
> Veuillez répondre à Mailing list for discussion of Firewall-1
>
>
>         Pour :  FW-1-MAILINGLIST@beethoven.us.checkpoint.com
>         cc :
>         Objet : [FW-1] SecuRemote/Netgear/Cable Modem question
>
> I'm running a WinME PC through a Netgear RT314
>   (RAS F/W Version: V3.25(CA.0) | 5/4/2001)
> Gateway Router and a Cable Modem.  I must use SecuRemote to
> reach my office computers.  This worked prior to installing the
> RT314.  Which setting must be modified on the RT314 so that
> I can again connect using SecuRemote?
>
> Thanks,
> John

John C. Lahr
lahr@usgs.gov

Central Region Geologic Hazards Team
U.S. Geological Survey
PO Box 25046
Denver, CO 80225

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================