On 1/24/19 6:50 AM, C. Cook wrote: > > Strangers are still getting in to the interior of my network! How is > this possible? > > Wed Jan 23 15:28:18 2019] net-fw DROP IN=wlp3s0 OUT= > MAC=34:02:86:43:de:1f:52:54:00:3e:56:2a:08:00 SRC=95.163.255.192 > DST=10.2.10.2 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=28760 DF PROTO=TCP > SPT=60772 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 OPT > (020405B40402080AAC0174E60000000001030307) ... > [Wed Jan 23 15:29:04 2019] net-fw DROP IN=wlp3s0 OUT= > MAC=34:02:86:43:de:1f:52:54:00:3e:56:2a:08:00 SRC=95.163.255.181 > DST=10.2.10.2 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=42741 DF PROTO=TCP > SPT=60561 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 OPT > (020405B40402080AAC0228C00000000001030307) >
I can't possibly guess without seeing a dump from the main Shorewall box. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users