Welcome, Guest. Please login or register.
Did you miss your activation email?
Saturday 02 November 2024, 04:21:42 am

Login with username, password and session length

The Latest Endian Firewall is now available for download HERE
14248 Posts in 4376 Topics by 6515 Members
Latest Member: hulteends
Search:     Advanced search
+  EFW Support
|-+  Support
| |-+  General Support
| | |-+  Getting INPUT:DROP by firewall for client connecting to the proxy port
0 Members and 2 Guests are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: Getting INPUT:DROP by firewall for client connecting to the proxy port  (Read 7332 times)
ayachem
Jr. Member
*
Offline Offline

Posts: 2


« on: Wednesday 01 July 2015, 06:07:37 am »

This is a strange situation involving Endian 2.5.2. 

One laptop client occasionally shows up in my endian logs with the following entry:
ulogd[4137]: INPUT:DROP IN=br0 OUT= MAC=00:90:36:97:c5:4c:00:07:7d:ad:25:d9:09:00 SRC=192.70.1.100 DST=192.30.1.5 LEN=40 TOS=00 PREC=0x00 TTL=128 ID=1115 DF PROTO=TCP SPT=64727 DPT=8080 SEQ=3363350564 ACK=2362886263 WINDOW=0 RST URGP=0 MARK=0

The firewall is actually disabled in the GUI.  This log entry is showing destination port of 8080 on the endian device, which is the transparent proxy port.  The user experiences failure of their internet access (via the proxy), while maintaining all other network connectivity.  I am forced to reboot the client to restore the connection.

Can you see anything in this log entry that indicates what is really wrong?  Is it malformed traffic? 

Any advice on where else to check?

Thanks in advance,

Michelle
Logged
Pages: [1] Go Up Print 
« previous next »
Jump to:  

Page created in 0.031 seconds with 19 queries.
Powered by SMF 1.1 RC2 | SMF © 2001-2005, Lewis Media Design by 7dana.com