Smoothwall blocking O365 on our Guest Wifi

[kennysarmy]

If I try and ping any addresses I get:

 

Reply from 10.107.89.250: Destination port unreachable

 

10.107.89.250 is the interface on the Smoothwall for the Guest network.

 

I can ping 10.107.89.250 OK.

[PaddyNewman]

If you static your DNS to 8.8.8.8 does it work then? Sounds so DNS-esque its horrible, and I work with if it can be DNS, its always going to be DNS Presumably the guest FW rules allow DNS and you force them to use public ones so they don't touch internal ones.

[ibpalle]

In the Smoothwall UI in the network - firewall - smoothwall access is the DNS service port open on the interface with IP of 10.107.89.250 ?

[kennysarmy]

This was the fix - from Smoothwall Engineer.

 

As discussed, we checked the Smoothwall and I couldnt see anything wrong, except for potentially some dodgy routing.

 

We looked at the old case and I saw my coleague mention the destination exemptions as a possible issue.

 

We removed them with the exception of 10.0.0.0/8 and MS sites started working without issue.

 

We have left them out for now as everything is confirmed to be working.

 

I would recommend adding back in any destination exemptions that arent MS IPs, but leave the MS ones out.

 

This should stop the issue happening again.