DMZ rule issue with Core-Update-Level: 148

Security Firewall Rules
1

Good morning,

after the update to 148 (Testing) the provision of services that are in the DMS no longer works.

Example:

In the DMZ there is a Web server that can only be accessed via HTTPS. For this purpose, a rule has been set up which allows incoming requests from the GEOIP area DE to an IP address from the DMZ area.

In plain text:

GEOIP:DE:443 -> Orange:192.168.70.20:443

I have also tested this rule without success:

Red:443 -> Orange:192.168.70.20:443

Does anyone have an idea how I can fix the problem without reinstalling?

Thanks
Olaf

2

Please give more details about the rule. (Full source, destination and nat parameters)

3

Currently I have set this configuration:

image
image1064×993 39 KB

4

In the log of the firewall I see the request but it is rejected:

image
image976×46 3.67 KB

5

OK, found the problem! My bad… :upside_down_face:

If someone makes the same mistake, here is the correct configuration:

image
image1030×997 39.3 KB