Creating an Access Rule in SonicWall 2040 pro - Enhanced OS

Posted on 2009-02-09
Last Modified: 2012-05-06
We are trying to open up port for our customer on their Sonicwall 2040.

They originally had port 25 opened to a group of IP ranges which works fine, i tried to duplicate this rule with our IP ranges but it didn't work (I created a new network object with our range and then added a access rule).

I then added our range to the group that they already had set up and this works fine.

However, we now need to open up another port (service) to our IP range so I'll need to create a new rule, however our connections are still being rejected.

Sorry for the vagueness, but do you have any ideas what I'm doing wrong?
Question by:WilliamIMS2

    Author Comment

    that should be with our* ranges not with out.
    LVL 32

    Accepted Solution

    For allowing inbound access that is exactly we do;
    1. Create a Network Object with IP range/subnet/host/FQDN/MAC.
    2. If needed create group address object.
    3. Create a custom rule from WAN->LAN; specify services type [if not predefined then create one before hand], source as address object created above; destination as needed.

    The only thing I think might be the problem is the order of the rule; the topmost rules has higher priority than the bottom most. On the firewall the rules are applied from top to bottom; and after the first rule match no other rules are looked at. There is a possibility that you have a less restrictive rule higher in the order; please move your rule up the order and this should solve the issue.

    Please implement and update.

    Thank you.
    LVL 32

    Expert Comment

    You can change the priority ranking of an access rule by clicking the Arrows icon in the Priority
    column. The Change Priority window is displayed. Enter the new priority number (1-10) in the
    Priority field, and click OK. 1 being the highest priority.

    Thank you.

    Author Comment

    Hi dpk,

    This is exactly what we did.

    1. We created a new network object with our IP range
    2. Created a wan --> lan rule to allow access to port 25 from our network object
    3. Moved the rule to the top of the list

    Our connections are then immediately rejected.

    I then changed the rule too allow access from 'any' and our connections were still immediately rejected.

    However, adding our Network object to their already defined rule for port 25 allowed us access.

    I now need to open up port 389 and we are having the same problem. I'm creating a rule that is identical to the one that works but the firewall immediately rejects our connections - I'm sure there is something simple that I am overlooking.

    Thanks a lot for your help.
    LVL 32

    Expert Comment

    Can post some sanitized logs which would indicate what is blocking the traffic; also have you configured NAT for the internal server.

    Thank you.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Suggested Solutions

    We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
    Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now