On 1/24/19 6:50 AM, C. Cook wrote:
> 
> Strangers are still getting in to the interior of my network!  How is
> this possible?
> 
> Wed Jan 23 15:28:18 2019] net-fw DROP IN=wlp3s0 OUT=
> MAC=34:02:86:43:de:1f:52:54:00:3e:56:2a:08:00 SRC=95.163.255.192
> DST=10.2.10.2 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=28760 DF PROTO=TCP
> SPT=60772 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 OPT
> (020405B40402080AAC0174E60000000001030307)
...
> [Wed Jan 23 15:29:04 2019] net-fw DROP IN=wlp3s0 OUT=
> MAC=34:02:86:43:de:1f:52:54:00:3e:56:2a:08:00 SRC=95.163.255.181
> DST=10.2.10.2 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=42741 DF PROTO=TCP
> SPT=60561 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 OPT
> (020405B40402080AAC0228C00000000001030307)
> 

I can't possibly guess without seeing a dump from the main Shorewall box.

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to