default blocked ports?

[Guest]

[DEpurpnijM]

Hiho!

Does EFW(community) per default block ALL ports (incoming)? Or is there some limit so - let's say higher than 3000 ports are open again?


Because I'm having those logs in /var/log/auth.log on a machine behind the firewall and didn't open that port....

 (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.1.87.43
 Failed password for invalid user mike from 122.1.87.43 port 53421 ssh2


Thanks

[npeterson]

Do you have any port forwarding rules or external access rules?

[DEpurpnijM]

I used to have a port forwarded but not forwarded to the server I posted the logs from.

Since then I just created a whitelist for my forwaring which, of course, is a little bit some kind of workaround but it solved my problem.

Thanks anyway