-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2/20/20 3:35 PM, Bruce Bannerman wrote: > Tom, > > I’m only getting a redirect message in the Reverse Proxy server’s > log: > > ===== www.foss4climate.org:80 <http://www.foss4climate.org:80> > 49.199.143.136 - - [21/Feb/2020:10:15:14 +1100] "GET / HTTP/1.1" > 302 553 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:73.0) > Gecko/20100101 Firefox/73.0" www.foss4climate.org:80 > <http://www.foss4climate.org:80> 34.229.157.237 - - > [21/Feb/2020:10:15:57 +1100] "GET / HTTP/1.1" 302 497 "-" > "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 > (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36" ===== > > I was testing from IP: 49.199.143.136 > > There was no entry in the Web Server’s log, so the connection > wasn’t made. > > > I’m redirecting http traffic to https on the Proxy Server. > > The (Firefox) browser shows the message ‘Performing TLS handshake > to www.foss4climate.org <http://www.foss4climate.org>…’, then times > out. > > > One other aspect that I didn’t mention earlier is that my > Firewall’s ‘messages’ and 'kern.log' log files are getting many > records such as: > > ===== Feb 21 10:16:06 fw kernel: [173036.380121] IPv4: martian > destination 0.0.0.0 from 49.199.143.136, dev eth0
The packets are coming from your laptop, but it appears that the modem/router is mangling them (setting destination IP to 0.0.0.0). Note that if your laptop would have actually sent such packets, they would have never reached your on-prem modem/router. Messages like the above indicate that the packets are being dropped by the Linux IP stack. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster Shoreline, \ with an international standard? Washington, USA \ A: Someone who makes you an offer you http://shorewall.org \ can't understand \________________________________________ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCgAdFiEEFNMNR63CLO6yqbL8luaz8kI6TRAFAl5Rb/8ACgkQluaz8kI6 TRBQ4w//fhMlizn5lMKIn7KjOY1UuUkaXUTw8HDO7S4KmkGmWvb4zCESyB+x54Yj 4LRQ3gGoiEzoMzHyEDaLgV9Ti4bEz7rFT7q6P/7GIQb8i6W9Mx0cOJYRld+ufDZo 9PH68AoMhKj94yDNnC6OMbFTsOqgBe/bHdaWMf+afZz4HsSJRtaLA/sB10DTTvEI y59dnKe1GRWdFOMb6kJq4A0ylOETHR6CTmIRTPPJHK5hOPjuyZLFXQpwiKr+oCLq EMM1s4CpGu9m5WFcaWdJ27PKoSu++/Fpeh5KoVXvLIc61z6M/aeM3jlnNxvLEz4A +j7BmgfQLW2KSaDANgf9ZoLwXcofOQToxWuycOhP21l5bfGficp3xsvvIKYwGKBA p/qGRmBCINjoFdsZtICoxoGNfKr8PhD9P0mdCIRJihUyAFNTnJN2hGRebzvM5mzE bgcu4vlQoyDmtc1aInJ5TWmOtQ1hKh2pDtsQJqnpGDWjFTsb2NfewSCLfCOaqT1D El7VEzqyRgXgyVkkGNwvMtsKi7IjcHU3qK9mY2bItUajoxv3NTb6ZwzeWFMLzL5a N18w8U2sfEgrKaSh71FsgkQ7Z8TFUx81CkJHW4GzuBxe5dTk8qtHxnUkrDkXOo2F wSZQt4lY8cLgdLgvSFz4KmkxfpQ5m8VBPTeVk5RDH76Qq3Q5mB4= =UBjv -----END PGP SIGNATURE----- _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
