Endian Knowledge Base
Search:     Advanced search
Browse by category:

I have problems when I connect multiple zones on the same switch. How to solve this?

Add comment
Views: 2985
Votes: 0
Comments: 0
Posted: 23 May, 2007
by: Warasin P.
Updated: 06 Apr, 2009
by: Warasin P.
First of all, it is no good idea to connect multiple zones on the same switch (or phsysical network). Zones are meant to physically separate your networks in order to have extra security.

But one may have good reasons to do so.
If you connect multiple zones on the same switch it is not predefined with the current kernel configuration, which interface will receive packets to an ip addresses of a zone, since the ip addresses will be owned by the firewall itself and not by the interface.

In order to change this behaviour log in to the firewall and write to each file in:

ls -1d /proc/sys/net/ipv4/conf/* | while read F; do echo "1" > $F/arp_ignore; done

If you like to have this executed at boot time, edit the file /var/efw/inithooks/start.local
and insert the following:

#!/bin/sh
ls -1d /proc/sys/net/ipv4/conf/* | while read F; do echo "1" > $F/arp_ignore; done
Others in this Category
document Why is port 113 open by default?
document Pressing F5 does not refresh a stale webpage
document Is there a way to stop sending mail to the user when POP3 Proxy has marked the email as Spam?
document Why can't I block connections from clients with the outgoing firewall which pass a proxy?
document Proxy analysis report and Log summary gives me no reports but an error message?
document When i download a large file over http proxy the transfer stop and the file don't full download.
document Endian Firewall boots from my daily backup USB stick / from my UMTS modem USB stick !?!
document Why is whitelist not working with http proxy authentication / contentfilter / antivirus?
document FTP connections through ftp proxy block. Log file says: "Failed to contact client data port"



RSS