Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 28 subscribers
  • Views 1198 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Interpretation Firewall log

Wolfgang Ritter1

I have a problem with my NAS and checking the traffic on sophos. I found that my NAS was allowed to contact different IP addresses by amazon. There isn't anyhing running which has to contact amazon (i hope so).

In the log i have a defined In interface and the src IP / port but no Out interface but also Dst IP / port.

How to i have interpret this:

Is the traffic over the wan allowed or is it just a information traffic is allowed for an internal journey (make a round trip through the nice world of 192.168.10.0/24). Before i contact the NAS community I want to be sure to understand the log information.

Thanks for a short info.

Wolfgang



This thread was automatically locked due to age.
Parents
  • 0

    Hi Wolfgang,

    what are the IPs of the related devices in the Network 192.168.10.0/24(?).


    If 192.168.10.10 is your NAS it probably talks to the internet via a NAT rule.

    If 192.168.10.10 is your firewall it acts as a proxy for https access of the internet.

Reply
  • 0

    Hi Wolfgang,

    what are the IPs of the related devices in the Network 192.168.10.0/24(?).


    If 192.168.10.10 is your NAS it probably talks to the internet via a NAT rule.

    If 192.168.10.10 is your firewall it acts as a proxy for https access of the internet.

Children
No Data