Messages

Does anyone have a workaround?

Anyone have any thoughts?

I have an Inbound port forward rule in when traffic traverses the NAT, the source IP is being stripped and replaced with the firewalls IP so the application thinks it's talking to the firewall instead of the public device. I need to preserve the originating address for this application. How can I do this?

So does anyone else have any thoughts on how to get tftp for a Cisco phone through the firewall?

Were you able to get this working?

Not sure I understand what you're asking. Are you saying to port forward it? TFTP responds on a random UDP 1024> and the firewall rejects it. I've port forwarded that range back into the internal host but the FW re-writes the port number so the host no longer knows what to do with it.

Anyone? How about an alternative method?

FYI, I've added this:
<?php

function tftpproxy_enabled()
{
    return true;
}

function tftpproxy_firewall($fw)
{
    if (!tftpproxy_enabled()) {
        return;
    }

    $fw->registerAnchor('tftp-proxy/*', 'nat');
    $fw->registerAnchor('tftp-proxy/*', 'rdr');
    $fw->registerAnchor('tftp-proxy/*', 'fw');
}

And I've added this:

tftp    dgram   udp     wait    root    /usr/libexec/tftp-proxy tftp-proxy -v


I reloaded the services after that.

Thanks

When I send the tftp request, the reply is being blocked.

I followed the what previous users did, but I'm not sure it's working properly. I don't see it starting.

There was a post a while back with a link to GitHub but nothing that was firm.

I should stipulate in this that I would be locking it down to one internet host. So basicly it looks like: OUTSIDE HOST->UDP-10000:20000->FW->NAT->UDP-10000:20000->INTERNAL HOST for example.

I need to allow all UDP traffic to hit a NAT policy that forwards to a single inside host. when making the NAT rule, I'm forced to enter a destination port. once the policy is applied, I see the inbound UDP traffic redirected to that port. I need the original destination port preserved. Now can I do that?

Thanks in advance!

-Bill