- Does the server listen on port-81? I'm being told to connect using port 37777 on the app (from the company that installed the system)
- Is the Firewall its default gateway? The only Firewall is the NS208 if it can be called that. I can ping the server IP from the NS208 telnet window
- Can you enable src-NAT on the policy (use egress interface IP) and test? I tried this but still no luck and nothing in the logs
- If you still dont see your IP in the policy logs, debugs will help-- I followed your commands above and the "get db st" command does not output anything
I added the debug commands on the interface IP and I see traffic from my IP (I replace my IP with me and their ISP/Interface IP with 1.1.1.1 this is not the VIP)
****** 1445879.0: <Untrust/ethernet3> packet received [60]******
ipid = 63827(f953), @d785e910
packet passed sanity check.
ethernet3:me/60818->1.1.1.1/37777,6<Root>
no session found
flow_first_sanity_check: in <ethernet3>, out <N/A>
self check, not for us
chose interface ethernet3 as incoming nat if.
packet dropped: for self but not interested
****** 1445880.0: <Untrust/ethernet3> packet received [60]******
ipid = 63828(f954), @d7840110
packet passed sanity check.
ethernet3:me/60818->1.1.1.1/37777,6<Root>
no session found
flow_first_sanity_check: in <ethernet3>, out <N/A>
self check, not for us
chose interface ethernet3 as incoming nat if.
packet dropped: for self but not interested
existing vector list 103-6c25c50.
existing vector list 103-6c25c50.
****** 1445882.0: <Untrust/ethernet3> packet received [60]******
ipid = 63829(f955), @d7841110
packet passed sanity check.
ethernet3:me/60818->1.1.1.1/37777,6<Root>
no session found
flow_first_sanity_check: in <ethernet3>, out <N/A>
self check, not for us
chose interface ethernet3 as incoming nat if.
packet dropped: for self but not interested
Interface <ethernet3> IPv6 disabled, drop IPv6 packet.
existing vector list 103-6c25c50.
existing vector list 103-6c25c50.
existing vector list 103-6c25c50.
****** 1445886.0: <Untrust/ethernet3> packet received [60]******
ipid = 63830(f956), @d7844110
packet passed sanity check.
ethernet3:me/60818->1.1.1.1/37777,6<Root>
no session found
flow_first_sanity_check: in <ethernet3>, out <N/A>
self check, not for us
chose interface ethernet3 as incoming nat if.
packet dropped: for self but not interested
Interface <ethernet3> IPv6 disabled, drop IPv6 packet.
****** 1445891.0: <Untrust/ethernet3> packet received [60]******
ipid = 57496(e098), @d784b110
packet passed sanity check.
ethernet3:me/60820->1.1.1.1/37777,6<Root>
no session found
flow_first_sanity_check: in <ethernet3>, out <N/A>
self check, not for us
chose interface ethernet3 as incoming nat if.
packet dropped: for self but not interested
existing vector list 103-6c25c50.
existing vector list 103-6c25c50.
existing vector list 81-6c25c00.
existing vector list 81-6c25c00.
existing vector list 81-6c25c00.
existing vector list 81-6c25c00.
****** 1445892.0: <Untrust/ethernet3> packet received [60]******
ipid = 57497(e099), @d784c910
packet passed sanity check.
ethernet3:me/60820->1.1.1.1/37777,6<Root>
no session found
flow_first_sanity_check: in <ethernet3>, out <N/A>
self check, not for us
chose interface ethernet3 as incoming nat if.
packet dropped: for self but not interested
Interface <ethernet3> IPv6 disabled, drop IPv6 packet.
existing vector list 81-6c25c00.
existing vector list 81-6c25c00.
Warning: dip 2 on both sub0 and sub1 of session 127741
existing vector list 81-6c25c00.
existing vector list 103-6c25c50.
existing vector list 103-6c25c50.
Warning: dip 2 on both sub0 and sub1 of session 127806
existing vector list 103-6c25c50.
existing vector list 81-6c25c00.
existing vector list 81-6c25c00.
Warning: dip 2 on both sub0 and sub1 of session 128046
existing vector list 81-6c25c00.
****** 1445894.0: <Untrust/ethernet3> packet received [60]******
ipid = 57498(e09a), @d784f110
packet passed sanity check.
ethernet3:me/60820->1.1.1.1/37777,6<Root>
no session found
flow_first_sanity_check: in <ethernet3>, out <N/A>
self check, not for us
chose interface ethernet3 as incoming nat if.
packet dropped: for self but not interested
****** 1445898.0: <Untrust/ethernet3> packet received [60]******
ipid = 57499(e09b), @d7851910
packet passed sanity check.
ethernet3:me/60820->1.1.1.1/37777,6<Root>
no session found
flow_first_sanity_check: in <ethernet3>, out <N/A>
self check, not for us
chose interface ethernet3 as incoming nat if.
packet dropped: for self but not interested
Warning: dip 2 on both sub0 and sub1 of session 127940