Home network configuration problem

[popeyespappy]

It's been a long time since I've been half ass serious about network management, and I'm having problems setting something up. This is what I want to do.



Problem is I can't see the SFTP server from my part of the LAN. Would it work better if I did this?



No after looking at the second picture I still don't think I'd be able to see the SFTP server from a wireless connection, and it looks like I'd introduce more problems than I've already got...

Suggestions?

[Autumnlicious]

The fault is in your firewall settings.

The source network is pretty clear - why not pass traffic through the firewall to the SFTP server?

[popeyespappy]

That's what I want to do. The servers are in a dmz. I can see the mail/web server. I may be going all the way out then looking back in when I see it though?

[Autumnlicious]

What you haven't illustrated is the outbound connection to the Internet - I assume that the web/mail server is indeed exposed to the outside.

It could be that the firewall rule that allows inbound traffic to the Web server supersedes the rule that would allow your internal traffic to the SFTP server.

In the firewall softwares I have dealt with, rules are evaluated linearly until a match is found. A mistake in ordering for your outbound and inbound traffic rules could be causing the issue.

If you have an internal IP address assigned to the web/mail server and an external IP address, then accessing it will indicate if you're coming in from the outside or inside.

As you're using a third-party solution, I have little expertise in the matter. My domain of knowledge is with IPF and PF rulesets, which can be tested individually and composed together.

[pocaracas]

Wow, so many power vampires!
Why don't you connect the mail nas servers to the switch where you have the media server?

[Dragonetti]

Does your firewall perform routing?

Does your firewall have rules to allow SFTP access for internal and external networks?

Does your manage switch have layer three functions?

I am use to CISCO gear, I would move everything to the manage switch and use VLANs to setup and DMZ, and allow the switch or router to route between devices. Use ACLs for access to the internal network and firewall for external dynamic entry.

---

I would also use EIGRP for IGP, and a default route for external.