On Tue, Jan 30, 2018 at 05:27:40PM +0000, Karol Augustin wrote: > > I don't know why it is important to you to log the port number so if you > could explain I would be grateful.
It's because of a Large Scale Nat using address+port. The same address is given out to more than one ISP customer along with a range of ports that they may use, and you can only identify the customer by knowing both the address and the range of ports they're using. This will become more common in the future. > You can deploy postscreen, which is a > good idea anyway and you will have port numbers in the logs: Yes, a good idea anyway. Best regards, A -- Andrew Sullivan a...@anvilwalrusden.com