I have transparent http proxy enabled. Every once in a while I get a dropped packet on port 80. If the transparent proxy is catching all http traffic then why the dropped packet? The IP happens to belong to astaro but I think that's because I practically live on this board.[:)]
One thought on this, when IPS blocks traffic does it show up in the packet filter log (I'm not sure if it does or doesn't)? Have you cross-checked with the IPS log to see if it dropped the traffic?
could you please tell us something about the destination and source ip? Is there a ip of the Astaro Interfaces? Could you please double check if you have entries in ips and afc logfile?
The source IP 192.168.0.10 is my pc on LAN. It uses astaro for proxy and is allowed in the allowed networks for proxy. The proxy is running in transparent mode and I have no problem surfing using http proxy.
I don't think IPS dropped shows up in packet filter. On the client side, I am not seeing any side effects that is why I posted this as a question and not a bug.
The other IP 85.115.22.9 belongs to astaro AG. Probably this website?? It takes you to ACC demo if I plug in directly. But that IP is not the problem. I get random blocked port 80 requests for different sites every so often.
Will try to look through the logs to find the answer if nobody else has any idea either.
