help on kerio winroute firewall

[gardenfresh420]

---

how did you setup your NICs.

my setup is local nic with static ip. internet nic has its ip configured by our isp

[gardenfresh420]

what is the version of winroute you're using?

i was using winroute 4 and 6..

i suggest you start with 4, really plain router software
winroute 6 already has firewall that really acts like a real hardware router..

enable the nat of the lan that's facing the computers, not the modem/wan..that's the main setup..

what else you want to know?

when i enable trafic rule wizard and allow all traffic and nat. still no internet even in the host
im using winroute 6.5

[chabm_more]

disable kerio
disable "lan" nic

do you have internet just the wan nic with the configuration of the isp?

what is your ip in the wan nic? isp ip or local ip?
what ip did you set in the "lan" nic?

you dont need to set a default gateway in the lan nic...

can you provide a screenshot of the kerio configuration that you set..
need to see how you did the settings..

[gardenfresh420]

disable kerio
disable "lan" nic

do you have internet just the wan nic with the configuration of the isp?

what is your ip in the wan nic? isp ip or local ip?
what ip did you set in the "lan" nic?

you dont need to set a default gateway in the lan nic...

can you provide a screenshot of the kerio configuration that you set..
need to see how you did the settings..

when i disable kerio service yes there is internet. ip on wan is isp ip.
ip on lan is just 192.168.0.4 w/mask 255.255.255.0
even if i set a rule on traffic to allow all still there is no internet, even on the server itself.

[chabm_more]

hehehe just as i thought..
you're using a modem/router device from isp..

and next, problem, you've assigned wan and lan with the same subnet

you got 192.168.0.x on wan and 192.168.0.x on lan
that will not work..

make your lan 192.168.1.x
you'll be up and running!

[gardenfresh420]

hehehe just as i thought..
you're using a modem/router device from isp..

and next, problem, you've assigned wan and lan with the same subnet

you got 192.168.0.x on wan and 192.168.0.x on lan
that will not work..

make your lan 192.168.1.x
you'll be up and running!

no bro im not using modem/router from isp. its an ip allocated to us from main office. anyway ill try that 092.168.1.xx. but why is it the host pc i mean the win2003 server does not have connections even if i allowed all the traffic? thanks for the help bro really appreciated. im about to give up on kerio hehe. but ill try what you guys saying.

[chabm_more]

yes, the "main office" has the router.. 192.168.0.x is a class c ip, which is commonly used in local area network.. anyways, the issue is you got same subnet on your wan and lan.. that's a no no.. hehehe

if kerio is enabled.. "it got confused" wan and lan are the same network address.. it should be different..
reason why your host is unable to connect when its in that setting..

enjoy

[gardenfresh420]

yes, the "main office" has the router.. 192.168.0.x is a class c ip, which is commonly used in local area network.. anyways, the issue is you got same subnet on your wan and lan.. that's a no no.. hehehe

if kerio is enabled.. "it got confused" wan and lan are the same network address.. it should be different..
reason why your host is unable to connect when its in that setting..

enjoy

brother ill update you tomorrow. thanks again.

[gardenfresh420]

bro few improvements. i change the ip of lan nic to 192.168.1.2. i can now ping the web sites but cant browse on ie and firefox. its like its still block. all traffic rule is enabled now.
also Proventia-Filter-Server sometimes apearing on browser.

[chabm_more]

hi!
great! now we now you're online..

can you give me a screenshot of the traffic policy(if something has changed in the previous screenshot)...
next, how did you ping? ping Yahoo!

can you browse ip? try browsing using ip..