[HELP]Inbound HTTP rejected on second ISP segment-Unknown WWW server

[fraserchen]

Hello Everyone,

I have a NG R55 AI on SPLAT, configured with load sharing mode ISP redundency, so 2 external NICs. A web server is mapped to the second ISP ip segment.

I can FTP in, SSH in no problem, but HTTP in got 'FW-1 at fw: Unknown WWW server' in browser. WebIntelligence is not enabled. In tracker window logs show it was rejected for the same reson. Strange thing is if I do http://x.x.x.x:8080, it works. Seem only rejecting port 80.

I'm lost.

[chuachongchee]

Originally Posted by fraserchen

Hello Everyone,

I have a NG R55 AI on SPLAT, configured with load sharing mode ISP redundency, so 2 external NICs. A web server is mapped to the second ISP ip segment.

I can FTP in, SSH in no problem, but HTTP in got 'FW-1 at fw: Unknown WWW server' in browser. WebIntelligence is not enabled. In tracker window logs show it was rejected for the same reson. Strange thing is if I do http://x.x.x.x:8080, it works. Seem only rejecting port 80.

I'm lost.

Whats the HFA level?? I have seen this on NGX R61, was resolved by a updated HFA..

[fraserchen]

HFA_R55_18

[chuachongchee]

Originally Posted by fraserchen

HFA_R55_18

Take a look at release notes of H22, see if this issue is resolved... i would suggest to upgrade to NGX or if not soon, at least upgrade to HF22..

Next, if this doesnt work, try to configure the HTTP service, under the advanced configuratio, in protocol type, set to none.. see if this works too...

Also, does this happen to only one firewall in particular or all your firewalls??