Routing Problem

[Firstsun]

I have DMZ Zone on optional port and Trusted port for private network. Optional and Trusted are different network (not the same subnet). How can i do that PC on optional port and trusted port can talk together. I can not FTP to my server on optional port from trusted port.

 

[dput]

It seems to me that you would have to set up rules that allowed the protocols you want from the trusted port to the optional port. Also, if you want to do it by name, you probably would need to add a host entry in your DNS for the server on the optional port.

Dan

 

[tracer4probs]

Couple of things you can do.

Add a service for FTP (If you have not already) On the outgoing tab add trusted->optional on the incoming tab add
the ip address of the server -> ip address of your pc. (if you want the server to be able to initiate talk to your pc.

One other thing you can do is add an outgoing service. If you do this you can on the internal hosts trusted and on the external hosts add optional. This will allow any protocol initiated from your trusted network to talk to your optional network.

If you still have problems after following these steps, then check your gateway on your pc and server. The gateway ip address on your pc should be the trusted IP address of the firewall and the gateway of the server should be the optional IP of the firewall.

Hope this helps