For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Edu_50128's avatar
Edu_50128
Icon for Nimbostratus rankNimbostratus
Sep 03, 2013

Yes, you are right, .65 is the server needs to connect to Internet.

 

I have made this change (remove .65 from the pool and configured the pool with the FW interface) and it seems the result is so similar (it´s below):

 

[admin@ITX196009BDMZ:Active] ~ tcpdump -i 0.0 -nn src host 192.168.159.65 and dst host 194.140.77.184 or src host 194.140.77.184 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes 09:30:17.500956 IP 192.168.159.65.4541 > 194.140.77.184.80: S 2272077780:2272077780(0) win 65535 09:30:17.500976 IP 194.140.77.184.80 > 192.168.159.65.4541: S 2385730972:2385730972(0) ack 2272077781 win 4380 09:30:17.501462 IP 192.168.159.65.4541 > 194.140.77.184.80: . ack 1 win 65535 09:30:17.501498 IP 192.168.159.65.4541 > 194.140.77.184.80: S 3054880835:3054880835(0) win 4380 09:30:17.502236 IP 192.168.159.65.4541 > 194.140.77.184.80: P 1:302(301) ack 1 win 65535 09:30:17.502248 IP 194.140.77.184.80 > 192.168.159.65.4541: . ack 302 win 4681 09:30:17.507380 IP 192.168.159.65.4541 > 194.140.77.184.80: . ack 1 win 65535 09:30:20.500702 IP 192.168.159.65.4541 > 194.140.77.184.80: S 3054880835:3054880835(0) win 4380 09:30:20.511974 IP 192.168.159.65.4541 > 194.140.77.184.80: . ack 1 win 65535 09:30:23.700792 IP 192.168.159.65.4541 > 194.140.77.184.80: S 3054880835:3054880835(0) win 4380 09:30:26.526090 IP 192.168.159.65.4541 > 194.140.77.184.80: . ack 1 win 65535 09:30:26.901044 IP 192.168.159.65.4541 > 194.140.77.184.80: S 3054880835:3054880835(0) win 4380 09:30:30.100874 IP 194.140.77.184.80 > 192.168.159.65.4541: R 1:1(0) ack 302 win 4681

 

The page is not loaded yet.

 

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Sep 03, 2013
    OK, so the pool member is now the firewall: 192.168.159.11 yes? What does the firewall rule look like please? Also, what type of VS have you configured, a standard one it would appear. Can you switch to a Performance (Layer 4) as this would be more appropriate.