Welcome, Guest. Please login or register.
Did you miss your activation email?
Friday 27 December 2024, 11:54:02 pm

Login with username, password and session length

The Latest Endian Firewall is now available for download HERE
14262 Posts in 4377 Topics by 6517 Members
Latest Member: Sandro
Search:     Advanced search
+  EFW Support
|-+  Support
| |-+  General Support
| | |-+  Getting INPUT:DROP by firewall for client connecting to the proxy port
0 Members and 2 Guests are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: Getting INPUT:DROP by firewall for client connecting to the proxy port  (Read 10123 times)
ayachem
Jr. Member
*
Offline Offline

Posts: 2


« on: Wednesday 01 July 2015, 06:07:37 am »

This is a strange situation involving Endian 2.5.2. 

One laptop client occasionally shows up in my endian logs with the following entry:
ulogd[4137]: INPUT:DROP IN=br0 OUT= MAC=00:90:36:97:c5:4c:00:07:7d:ad:25:d9:09:00 SRC=192.70.1.100 DST=192.30.1.5 LEN=40 TOS=00 PREC=0x00 TTL=128 ID=1115 DF PROTO=TCP SPT=64727 DPT=8080 SEQ=3363350564 ACK=2362886263 WINDOW=0 RST URGP=0 MARK=0

The firewall is actually disabled in the GUI.  This log entry is showing destination port of 8080 on the endian device, which is the transparent proxy port.  The user experiences failure of their internet access (via the proxy), while maintaining all other network connectivity.  I am forced to reboot the client to restore the connection.

Can you see anything in this log entry that indicates what is really wrong?  Is it malformed traffic? 

Any advice on where else to check?

Thanks in advance,

Michelle
Logged
Pages: [1] Go Up Print 
« previous next »
Jump to:  

Page created in 0.047 seconds with 20 queries.
Powered by SMF 1.1 RC2 | SMF © 2001-2005, Lewis Media Design by 7dana.com