________________________________ From: Tom Eastep <[email protected]> > >> Failing to connect from host in 'loc' zone with IP addr. >> 10.215.145.8 to http://www.shorewall.net. Nothing in Squid >> access.log. > > > Please set LOGFILE correctly and reproduce the problem -- there are no > log entries listed in this dump, yet there have been packets dropped > since the counters were reset.
I'm now attaching the new shorewall dump but I can't seem to find anything regarding these SRC and DST IP addresses. Also note that I ran this in another terminal: # tcpdump -n -i enp11s0 host 10.216.145.8 or host 63.135.54.24 dropped privs to tcpdump tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on enp11s0, link-type EN10MB (Ethernet), capture size 262144 bytes 00:20:09.648108 IP 10.215.145.8.1940 > 63.135.54.24.80: Flags [S], seq 2538587431, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:09.668130 IP 10.215.145.8.1942 > 63.135.54.24.80: Flags [S], seq 246017419, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:09.753430 IP 10.215.145.8.1943 > 63.135.54.24.80: Flags [S], seq 220944161, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:12.540544 IP 10.215.145.8.1940 > 63.135.54.24.80: Flags [S], seq 2538587431, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:12.540597 IP 10.215.145.8.1942 > 63.135.54.24.80: Flags [S], seq 246017419, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:12.649779 IP 10.215.145.8.1943 > 63.135.54.24.80: Flags [S], seq 220944161, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:18.556050 IP 10.215.145.8.1940 > 63.135.54.24.80: Flags [S], seq 2538587431, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:18.557059 IP 10.215.145.8.1942 > 63.135.54.24.80: Flags [S], seq 246017419, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:18.665475 IP 10.215.145.8.1943 > 63.135.54.24.80: Flags [S], seq 220944161, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:30.607604 IP 10.215.145.8.1957 > 63.135.54.24.80: Flags [S], seq 2395699003, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:30.607822 IP 10.215.145.8.1958 > 63.135.54.24.80: Flags [S], seq 1090195958, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:30.712769 IP 10.215.145.8.1959 > 63.135.54.24.80: Flags [S], seq 4187670571, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:33.540494 IP 10.215.145.8.1957 > 63.135.54.24.80: Flags [S], seq 2395699003, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:33.541119 IP 10.215.145.8.1958 > 63.135.54.24.80: Flags [S], seq 1090195958, win 64240, options [mss 1460,nop,nop,sackOK], length 0 00:20:33.649864 IP 10.215.145.8.1959 > 63.135.54.24.80: Flags [S], seq 4187670571, win 64240, options [mss 1460,nop,nop,sackOK], length 0 Vieri
dump.gz
Description: application/gzip
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
