can't config firewall destination port and address not works


#1

Hi,
I have installed vyos on esxi host virtual machine , I gave it 3 ethernets which have different vlan ids. I’m trying to open http and https on a single machine but it doesn’t work. if I set destination protocol icmp it works and I can ping the host but http not works. here is my config. please help me. Is there any known isuues with vmware esxi 6.0 u3 ?

firewall { all-ping enable broadcast-ping disable config-trap disable ipv6-receive-redirects disable ipv6-src-route disable log-martians enable name V115-IN { default-action accept } name V117-IN { default-action drop rule 1 { action accept destination { address 192.168.17.10 } protocol all state { established enable related enable } } rule 2 { action accept protocol icmp } rule 3 { action accept source { address 192.168.75.16 } } rule 4 { action accept destination { address 192.168.17.30 port 80 } protocol tcp } } name V119-IN { default-action drop } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable twa-hazards-protection disable } interfaces { ethernet eth0 { address 192.168.110.1/29 description "VLAN 110" duplex auto hw-id 00:50:56:ae:eb:05 smp_affinity auto speed auto } ethernet eth1 { address 192.168.19.1/24 description "VLAN 19" duplex auto firewall { in { } } hw-id 00:50:56:ae:99:95 smp_affinity auto speed auto } ethernet eth2 { address 192.168.17.1/24 description "VLAN 17" firewall { in { name V117-IN } out { } } hw-id 00:50:56:ae:f9:8b } loopback lo { } }


#2

Where are your NAT rules?


#3

I don’t use NAT. I found out I was wrong. It works like a charm