ZyXEL Communications ZYWALL 70 - V4.03 Informações Técnicas descarregar pdf (Página 13)

21. [BUG FIX] SPR ID: 071114943

Symptom: ZyWALL cannot reply packet on correct WAN interface.

Condition:

(192.168.1.60) (192.168.10.33)

PC-------(LAN)DUT---WAN1(192.168.5.33)-----Router----PC

| |

|----WAN2(192.168.7.33)--------|

(1) Set WAN=Active/Active mode, WAN1=192.168.5.33,WAN2=192.168.7.33.

(2) Policy Route=Active, Source Address=192.168.1.60, Destination Address=0.0.0.0,

Gateway=WAN2, Use another interface when the specified WAN interface is not

available.

(3) NAT 1-1 rule for WAN1: Local Start IP=192.168.1.60, Global Start

IP=192.168.5.33.

(4) NAT 1-1 rule for WAN2: Local Start IP=192.168.1.60, Global Start

IP=192.168.7.33.

(5) When WAN2 is down, policy route=active, from 192.168.10.33 can access

192.168.1.60 FTP server via WAN1.

(6) When WAN2 is up, policy route = active, from 192.168.10.33 cannot access

192.168.1.60 FTP server via WAN1.

22. [BUG FIX] SPR ID: 071115018

Symptom: Log of DNS will show wrong port number when LAN DNS server

forwards DNS request to external server.

Topology:

PC---------------------(LAN)ZyWALL(WAN)----DNS Server

(192.168.1.33) | (172.25.5.1)

LAN DNS Server------

(192.168.1.38)

Condition:

(1) Reset rom of ZyWALL

(2) Add a LAN to WAN firewall permit rule, select DNS service, Enable Log Packet

Information When Matched

(3) eWC>SECURITY>FIREWALL>Threshold, Disable DoS Attack Protection on

LAN

(4) Configured LAN DNS Server(192.168.1.38) as DNS proxy to forward DNS

request to DNS server(172.25.5.1)

(5) Set PC DNS server as 192.168.1.38, ping some internet domains. For example,

ping www.google.cn

(6) eWC>LOGS, you will find some logs exist with LAN to WAN firewall rule of

DNS service , but port is not 53

(7) eWC>SECURITY>FIREWALL>Threshold, Enable DoS Attack Protection on

LAN, then the logs show correctly

1 2 ... 8 9 10 11 12 13 14 15 16 17 18 ... 81 82

Sem comentários

ZyXEL Communications ZYWALL 70 - V4.03 Informações Técnicas Página 13