Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more
Reload this Page TCP Drop
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-07-2004, 08:24 AM
Junior Member
  
Join Date: Jul 2002
Posts: 16
Default TCP Drop
I've set up dnat for ftp and http and they were succesful, but I can't figure out this one for Ultima Online Port 2593. I did the filter rule I did the dnat for it. But this is the error that I show in the log file.

2004-Feb 7 01:01:36 (none) kernel: TCP Drop: IN=eth1 OUT= MAC=00:c0:4f:4f:9d:b9:00:09:12:83:f4:8c:08:00 SRC=218.92.**.** DST=68.106.***.*** LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=41738 DF PROTO=TCP SPT=3878 DPT=4899 WINDOW=16384 RES=0x00 SYN URGP=0

I just don't know, any one that can tell me what I'm missing or what that error message means I would be greatful. The 68.106 IP address I know what that is but I don't know where the other IP address came from. It's not mine. Please any help would be great. As you can see by the time of the error I've been up late trying to figure it out.

Thanks
Fearmonge
Fearmonge@yahoo.com [img]/images/graemlins/confused.gif[/img]
Reply With Quote
  #2 (permalink)  
Old 02-07-2004, 07:11 PM
Wizard
  
Join Date: Jul 2003
Location: U.S.
Posts: 1,265
Default Re: TCP Drop
Are you just saying that this shows up unsolicited out of nowhere and want to know why?

IF that's what you're asking, it's probably the background radiation of the Internet; an accidental transmission (e.g., somebody has a route wrong...).
Or it could be that that port is a juicy target for hackers...
Reply With Quote
  #3 (permalink)  
Old 02-07-2004, 08:56 PM
Junior Member
  
Join Date: Jul 2002
Posts: 16
Default Re: TCP Drop
Ok so here is what I have and what I want to do. Buddy's computer needs to log on to my server behind Astaro. From his ip address I want to let everything in to that server. Please what is the best way to do and how. I want too know what I'm doing wrong!!! If you need more info please let me know.

His Ip = 67.69.***.**

Firewall outside nic = 68.106.***.***
Firewall inside nic = 192.168.0.254

Server inside on the lan = 192.168.0.199

Thanks
Fearmonge
Fearmonge@yahoo.com
Reply With Quote
  #4 (permalink)  
Old 02-07-2004, 11:53 PM
Wizard
  
Join Date: Jul 2003
Location: U.S.
Posts: 1,265
Default Re: TCP Drop
And what is/are your DNAT rule/rules?
Reply With Quote
  #5 (permalink)  
Old 02-08-2004, 12:08 AM
Junior Member
  
Join Date: Jul 2002
Posts: 16
Default Re: TCP Drop
Dnat is:

Source Address =no match, Destination address=outside nic, Service =port 2593, Change sourec to, Address = outside nic, service source=no change, change destination to, Address=server ip, service destination=no change

Packet filter is:

client=any, to =server, service = port 2593 allow

Thanks
Fearmonge
Fearmonge@yahoo.com
Reply With Quote
  #6 (permalink)  
Old 02-08-2004, 12:52 AM
Wizard
  
Join Date: Jul 2003
Location: U.S.
Posts: 1,265
Default Re: TCP Drop
Above you say you want to let 'everything' in from that address; now you are saying just one port. Just checking: which is it?
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 01:25 PM.

 
Contact Us - Astaro User Bulletin Board - Archive - Top

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.