After the reboot, there was an email
[INFO-120] Sockd not running - restarted
Now, I notice my IM Client (Pidgin) isn't connecting through the SOCKS proxy anymore.
(it was working fine in 7.200)
I've tried restarting (disabling/enabling) the proxy in webmin, with no success.
Telnet'ing to port 1080 on the firewall does show that something is listening.
Disabling the socks proxy in Pidgin results in it connecting ok.
I don't have the IM/P2P security enabled, but I do have the standard IPS enabled.
There's nothing relevant in the IPS log.
Packetfilter log shows drops [:(]
# grep 1080 packetfilter.log
2008:06:21-01:12:50 (none) ulogd[2497]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="br0" dstmac="00:90:27:2a:75[:D]5" srcmac="00:11:09:c1:51:49" srcip="192.168.11.13" dstip="192.168.11.1" proto="6" length="40" tos="0x00" prec="0x00" ttl="128" srcport="3520" dstport="1080" tcpflags="ACKFIN "
2008:06:21-01:12:51 (none) ulogd[2497]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="br0" dstmac="00:90:27:2a:75[:D]5" srcmac="00:11:09:c1:51:49" srcip="192.168.11.13" dstip="192.168.11.1" proto="6" length="48" tos="0x00" prec="0x00" ttl="128" srcport="3573" dstport="1080" tcpflags="SYN"
2008:06:21-01:12:52 (none) ulogd[2497]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="br0" dstmac="00:90:27:2a:75[:D]5" srcmac="00:11:09:c1:51:49" srcip="192.168.11.13" dstip="192.168.11.1" proto="6" length="40" tos="0x00" prec="0x00" ttl="128" srcport="3520" dstport="1080" tcpflags="ACKFIN "
2008:06:21-01:12:57 (none) ulogd[2497]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="br0" dstmac="00:90:27:2a:75[:D]5" srcmac="00:11:09:c1:51:49" srcip="192.168.11.13" dstip="192.168.11.1" proto="6" length="40" tos="0x00" prec="0x00" ttl="128" srcport="3520" dstport="1080" tcpflags="ACKFIN "
Why am I having deja vu?
Barry
This thread was automatically locked due to age.