untrusted webbrowsing

[Buccaneer]

Hi there

Ive set up the firewall with a trusted lan for staff and untrusted lan for visitors.

I don want the visitor lan to access the staff lan, however the first rule created was to allow webbrowsing, i cloned it and added the visitor source addess to the rule, however anything on the visitor side cannot access any web site.

Ive allowed dns from a staff lan dns server and i have check to allows resolution on, whe i look at the logs it shows the sender ip, with the correct rule classification but shows traffic as incomplete.

The staff rule works ok, is there anything obvious im missing?

Thanks.

[kprakash · Accepted solution]

You are probably missing a Source NAT translation from visitor  lan to the untrust zone, NATing it to the IP address of the untrust interface.

BR,

Karthik RP