Can't connect to Server on LAN from Server on DMZ SonicWALL NSA220

Hi,

I've got a web server setup in a DMZ on a SonicWALL NSA220. I have created firewall rules to allow Port 80 & 1433 from DMZ > LAN but it doesn't appear to be working, I'm testing the ports with telnet, I can successfully connect to the server via telnet from another host that is on the LAN. Do I need to create a NAT Policy to allow traffic from the DMZ > LAN?



Kind Regards,
Tom CarrClient Satisfaction SpecialistAsked:
Who is Participating?
 
atlas_shudderedConnect With a Mentor Sr. Network EngineerCommented:
okay   you shouldn't need a NAT rule between the two hosts assuming you have routing in place, which it sounds like you do since you can ping inside to out.

I think that you may have a rule missing or some type of enforcement knocking you down by the way you describe it.  Try this first.  Set up a rule to allow ICMP/ping from the DMZ server to the inside and try to ping DMZ to LAN again.
0
 
atlas_shudderedSr. Network EngineerCommented:
Disclaimer - not a Sonicwall geek

That said, are you trying to connect from the LAN to the DMZ or from the DMZ to the LAN?
0
 
Tom CarrClient Satisfaction SpecialistAuthor Commented:
I'm trying to connect from the DMZ to the LAN

I can connect from LAN to LAN

I have a web server sat in the DMZ that needs to communicate with a database server that is on the LAN.

If I try to telnet from the server on the DMZ to the server on the LAN it times out. If I try the same thing from a server that is on the LAN it successfully connects. I can also ping the server that is in the DMZ from the database server on the LAN but not the other way around which is by design.
0
 
Tom CarrClient Satisfaction SpecialistAuthor Commented:
Hi,

Thanks for your suggestion, I've looked over this again and got it working. Creating the ping rule made me look over the firewall rules again and I think I had made a slight error in the config.
0
 
Tom CarrClient Satisfaction SpecialistAuthor Commented:
Creating the ping rule made me look over the firewall rules again and I think I had made a slight error in the config.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.