I have transparent http proxy enabled. Every once in a while I get a dropped packet on port 80. If the transparent proxy is catching all http traffic then why the dropped packet? The IP happens to belong to astaro but I think that's because I practically live on this board.[:)]
One thought on this, when IPS blocks traffic does it show up in the packet filter log (I'm not sure if it does or doesn't)? Have you cross-checked with the IPS log to see if it dropped the traffic?
One thought on this, when IPS blocks traffic does it show up in the packet filter log (I'm not sure if it does or doesn't)? Have you cross-checked with the IPS log to see if it dropped the traffic?
