Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 3 subscribers
  • Views 1952 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ports being blocked after DNAT (PLEX/VPN)

Nigel Tatschner

Hey all, 

 

In an attempt to give you an overview of my environment here is the basic set-up:

 

  1. 1x Sky Hub (All Services off(DHCP etc), Configured DMZ to WAN Interface)
  2. 1x Virtual Host (Proxmox)
  3. 1x Sophos UTM 9 VM
    1. 2 x Nic
      1. 1x internal on 192.168.0.0/24 - IP 192.168.0.1
      2. 1x External (WAN) on 192.168.1.0/24 - IP 192.168.1.165
    2. DHCP/DNS Forward configured
  4. 1x Docker Host - IP 192.168.0.252 - Docker Network 172.18.0/24
    1. 1x Traefik Proxy - on 80/443 - All Docker Service behind this - except plex
    2. 1x Plex Container - TCP 32400
    3. 1x Transmission over VPN - UDP 1282

 

NAT Rules:

Firewall:

Manually Configured:

Auto Configured:

 

Attached is the firewall log.

 

One of the issue i'm having is that "Remote Connection" dose work, after enabling it the status goes green for a few seconds then goes back red.

The other issue is the VPN port is being blocked too. 

 

In addition to this i have a couple of questions,

 

  1. How do you allow all traffic internally ?
  2. Whats the best way to deal with issues resolving an domain name that points to my external (Sky Hub) IP? (I've used additional host FQDNs for now which works)

 

Thank you for your time and please let me know if there is anything else i can provide. 

Fullscreen 5811.packetfilter.log Download 
2019:12:31-10:44:38 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55047" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:38 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55105" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:38 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55106" dstport="16067" tcpflags="SYN" 
2019:12:31-10:44:38 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55107" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:38 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55108" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:38 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55101" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:39 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55055" dstport="16067" tcpflags="SYN" 
2019:12:31-10:44:39 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55056" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:39 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55057" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:39 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55105" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:40 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55106" dstport="16067" tcpflags="SYN" 
2019:12:31-10:44:40 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55107" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:40 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55108" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:41 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="178.79.142.46" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55095" dstport="8443" tcpflags="SYN" 
2019:12:31-10:44:43 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="38:8b:59:3d:2a:79" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.102" dstip="8.8.8.8" proto="17" length="60" tos="0x00" prec="0x00" ttl="63" srcport="33095" dstport="53" 
2019:12:31-10:44:43 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55101" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:44 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55105" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:44 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55106" dstport="16067" tcpflags="SYN" 
2019:12:31-10:44:44 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55107" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:44 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55108" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:44 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55081" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:44 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55082" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:44 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55083" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:47 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55137" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:47 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55138" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:47 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55139" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:47 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="178.79.142.46" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55140" dstport="8443" tcpflags="SYN" 
2019:12:31-10:44:48 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55137" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:48 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55138" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:48 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55139" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:48 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="178.79.142.46" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55140" dstport="8443" tcpflags="SYN" 
2019:12:31-10:44:48 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="ce:5b:5b:45:97:6c" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.252" dstip="1.1.1.1" proto="17" length="63" tos="0x00" prec="0x00" ttl="62" srcport="35430" dstport="53" 
2019:12:31-10:44:48 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="ce:5b:5b:45:97:6c" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.252" dstip="1.1.1.1" proto="17" length="63" tos="0x00" prec="0x00" ttl="62" srcport="55004" dstport="53" 
2019:12:31-10:44:48 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ce:5b:5b:45:97:6c" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.252" dstip="67.215.7.186" proto="17" length="42" tos="0x00" prec="0x00" ttl="62" srcport="45311" dstport="1282" 
2019:12:31-10:44:49 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="178.79.142.46" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55095" dstport="8443" tcpflags="SYN" 
2019:12:31-10:44:49 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55137" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:49 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55138" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:49 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55139" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:49 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="178.79.142.46" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55140" dstport="8443" tcpflags="SYN" 
2019:12:31-10:44:51 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ce:5b:5b:45:97:6c" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.252" dstip="67.215.7.186" proto="17" length="42" tos="0x00" prec="0x00" ttl="62" srcport="45311" dstport="1282" 
2019:12:31-10:44:51 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55101" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:52 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55105" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:52 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55106" dstport="16067" tcpflags="SYN" 
2019:12:31-10:44:52 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55107" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:52 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55108" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:52 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="3c:8d:20:f2:de:24" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.121" dstip="8.8.8.8" proto="17" length="65" tos="0x00" prec="0x00" ttl="63" srcport="33289" dstport="53" 
2019:12:31-10:44:53 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ce:5b:5b:45:97:6c" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.252" dstip="REMOVED" proto="6" length="60" tos="0x00" prec="0x00" ttl="62" srcport="49688" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:53 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55137" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:53 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55138" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:53 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55139" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:53 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="178.79.142.46" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55140" dstport="8443" tcpflags="SYN" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ce:5b:5b:45:97:6c" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.252" dstip="REMOVED" proto="6" length="60" tos="0x00" prec="0x00" ttl="62" srcport="49688" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ce:5b:5b:45:97:6c" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.252" dstip="67.215.7.186" proto="17" length="42" tos="0x00" prec="0x00" ttl="62" srcport="45311" dstport="1282" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55161" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55162" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55163" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="80" tos="0x00" prec="0x00" ttl="127" srcport="50218" dstport="53" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="80" tos="0x00" prec="0x00" ttl="127" srcport="54965" dstport="53" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55164" dstport="16067" tcpflags="SYN" 
2019:12:31-10:44:54 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55165" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:56 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55161" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:56 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55162" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:56 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55163" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:56 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55164" dstport="16067" tcpflags="SYN" 
2019:12:31-10:44:56 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55165" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:56 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ec:b5:fa:03:c8:19" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.100" dstip="216.239.35.8" proto="17" length="76" tos="0x10" prec="0x00" ttl="63" srcport="60904" dstport="123" 
2019:12:31-10:44:56 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ec:b5:fa:03:c8:19" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.100" dstip="216.239.35.4" proto="17" length="76" tos="0x10" prec="0x00" ttl="63" srcport="48569" dstport="123" 
2019:12:31-10:44:56 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ec:b5:fa:03:c8:19" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.100" dstip="216.239.35.0" proto="17" length="76" tos="0x10" prec="0x00" ttl="63" srcport="51215" dstport="123" 
2019:12:31-10:44:57 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55170" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:57 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="71" tos="0x00" prec="0x00" ttl="127" srcport="60413" dstport="53" 
2019:12:31-10:44:57 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="71" tos="0x00" prec="0x00" ttl="127" srcport="57114" dstport="53" 
2019:12:31-10:44:57 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ec:b5:fa:03:c8:19" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.100" dstip="216.239.35.12" proto="17" length="76" tos="0x10" prec="0x00" ttl="63" srcport="57957" dstport="123" 
2019:12:31-10:44:57 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55161" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:57 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55162" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55170" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55163" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55175" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55176" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55164" dstport="16067" tcpflags="SYN" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55165" dstport="15153" tcpflags="SYN" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="76" tos="0x00" prec="0x00" ttl="127" srcport="55333" dstport="53" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="76" tos="0x00" prec="0x00" ttl="127" srcport="56240" dstport="53" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="77" tos="0x00" prec="0x00" ttl="127" srcport="59539" dstport="53" 
2019:12:31-10:44:58 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="77" tos="0x00" prec="0x00" ttl="127" srcport="57495" dstport="53" 
2019:12:31-10:44:59 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55175" dstport="12848" tcpflags="SYN" 
2019:12:31-10:44:59 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55176" dstport="32400" tcpflags="SYN" 
2019:12:31-10:44:59 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55170" dstport="12848" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55175" dstport="12848" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55176" dstport="32400" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55137" dstport="12848" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55138" dstport="12848" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55139" dstport="32400" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55161" dstport="15153" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="178.79.142.46" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55140" dstport="8443" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55162" dstport="32400" tcpflags="SYN" 
2019:12:31-10:45:01 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55163" dstport="32400" tcpflags="SYN" 
2019:12:31-10:45:02 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55164" dstport="16067" tcpflags="SYN" 
2019:12:31-10:45:02 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55165" dstport="15153" tcpflags="SYN" 
2019:12:31-10:45:02 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="ce:5b:5b:45:97:6c" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.252" dstip="67.215.7.186" proto="17" length="42" tos="0x00" prec="0x00" ttl="62" srcport="45311" dstport="1282" 
2019:12:31-10:45:03 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="30:fd:38:a2:e8:23" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.101" dstip="8.8.8.8" proto="17" length="65" tos="0x00" prec="0x00" ttl="63" srcport="52739" dstport="53" 
2019:12:31-10:45:03 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55170" dstport="12848" tcpflags="SYN" 
2019:12:31-10:45:05 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="77" tos="0x00" prec="0x00" ttl="127" srcport="62768" dstport="53" 
2019:12:31-10:45:05 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="8.8.8.8" proto="17" length="77" tos="0x00" prec="0x00" ttl="127" srcport="53675" dstport="53" 
2019:12:31-10:45:05 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55175" dstport="12848" tcpflags="SYN" 
2019:12:31-10:45:05 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55176" dstport="32400" tcpflags="SYN" 
2019:12:31-10:45:07 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="00:f6:20:73:94:42" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.118" dstip="8.8.8.8" proto="17" length="65" tos="0x00" prec="0x00" ttl="63" srcport="39714" dstport="53" 
2019:12:31-10:45:07 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="00:f6:20:73:94:42" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.118" dstip="8.8.8.8" proto="17" length="65" tos="0x00" prec="0x00" ttl="63" srcport="57965" dstport="53" 
2019:12:31-10:45:09 thegrid ulogd[4753]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="10" initf="eth0" outitf="eth1" srcmac="3c:8d:20:f2:de:24" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.121" dstip="8.8.8.8" proto="17" length="60" tos="0x00" prec="0x00" ttl="63" srcport="56708" dstport="53" 
2019:12:31-10:45:10 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55161" dstport="15153" tcpflags="SYN" 
2019:12:31-10:45:10 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.236" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55162" dstport="32400" tcpflags="SYN" 
2019:12:31-10:45:10 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.248" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55163" dstport="32400" tcpflags="SYN" 
2019:12:31-10:45:10 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="82.129.122.107" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55164" dstport="16067" tcpflags="SYN" 
2019:12:31-10:45:10 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55165" dstport="15153" tcpflags="SYN" 
2019:12:31-10:45:12 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="52.232.24.230" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55170" dstport="12848" tcpflags="SYN" 
2019:12:31-10:45:13 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="81.2.160.25" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55175" dstport="12848" tcpflags="SYN" 
2019:12:31-10:45:13 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth3" srcmac="18:31:bf:b7:f8:70" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.169" dstip="192.168.1.4" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="55176" dstport="32400" tcpflags="SYN" 
2019:12:31-10:45:18 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="a0:56:f3:1e:f8:7b" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.125" dstip="17.57.146.84" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="49285" dstport="5223" tcpflags="SYN" 
2019:12:31-10:45:18 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="a0:56:f3:1e:f8:7b" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.125" dstip="17.57.146.6" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="49286" dstport="5223" tcpflags="SYN" 
2019:12:31-10:45:18 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="a0:56:f3:1e:f8:7b" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.125" dstip="17.57.146.5" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="49287" dstport="5223" tcpflags="SYN" 
2019:12:31-10:45:18 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="a0:56:f3:1e:f8:7b" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.125" dstip="17.57.146.5" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="49287" dstport="5223" tcpflags="SYN" 
2019:12:31-10:45:18 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="a0:56:f3:1e:f8:7b" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.125" dstip="17.57.146.5" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="49287" dstport="5223" tcpflags="SYN" 
2019:12:31-10:45:18 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="a0:56:f3:1e:f8:7b" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.125" dstip="17.57.146.5" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="49287" dstport="5223" tcpflags="SYN" 
2019:12:31-10:45:18 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="a0:56:f3:1e:f8:7b" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.125" dstip="17.57.146.5" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="49287" dstport="5223" tcpflags="SYN" 
2019:12:31-10:45:18 thegrid ulogd[4753]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth0" outitf="eth1" srcmac="a0:56:f3:1e:f8:7b" dstmac="d2:81:41:fb:84:ef" srcip="192.168.0.125" dstip="17.57.146.5" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="49287" dstport="5223" tcpflags="SYN"



This thread was automatically locked due to age.
Parents
  • +1

    Hi  

    Thanks for the details. That does make it easy to understand the setup and try to answer any questions.

    Regarding your first question; How do you allow all traffic internally?

    > Apart from the Firewall rule no. 8 you have configured for Internal network to Internal network, you will also need to make sure that Web traffic is not being blocked by UTM. In order to achieve this, you can either create a tag for Internal network in WebFiltering or add the Internal network in  Skip Transparent Mode Destination Hosts/Network under Web Protection > Filtering Options > Misc. This way, it will not filter the Web Traffic going to the Internal network.

    Your second question;What's the best way to deal with issues resolving a domain name that points to my external (Sky Hub) IP? (I've used additional host FQDNs for now which works)

    > You can create a DNS Request route to point to any specific DNS server from where the specific Host will be resolved. You can find it in Sophos UTM: Best practices for DNS Configuration. The other option is to create a DNS host which you've already implemented.

    I've checked the packetfilter.log and all the dropped packets had fwrule="60002" which means it was a default drop. 

    Logmark Table

    Logmark Value Iptables Chain Description Target
     60001 filter:INPUT Input Default Drop LOGDROP
     60002 filter:FORWARD   Forward Default Drop LOGDROP
     60003 filter:OUTPUT Output Default Drop LOGDROP 
     60004 filter:AUTO_INPUT   Forbidden SSH connects LOGDROP 
     60005 filter:AUTO_INPUT Forbidden WebAdmin connects  LOGDROP
    60006 filter:AUTO_INPUT Allowed WebAdmin connects (if logging enabled) LOGACCEPT
    60007 filter:INVALID_PKT Drop invalid packets LOGDROP
    60008 filter:SPOOF_DROP Drop spoofed packets LOGDROP
    60009 filter:STRICT_TCP_STATE Drop packets with suspicious tcp state LOGDROP
    60010 mangle:PREROUTING Log FTP data connections LOG


    You can read the KBA: Packetfilter logfiles on the Sophos UTM for more information on packetfilter logs.

    Regards

    Jaydeep

Reply
  • +1

    Hi  

    Thanks for the details. That does make it easy to understand the setup and try to answer any questions.

    Regarding your first question; How do you allow all traffic internally?

    > Apart from the Firewall rule no. 8 you have configured for Internal network to Internal network, you will also need to make sure that Web traffic is not being blocked by UTM. In order to achieve this, you can either create a tag for Internal network in WebFiltering or add the Internal network in  Skip Transparent Mode Destination Hosts/Network under Web Protection > Filtering Options > Misc. This way, it will not filter the Web Traffic going to the Internal network.

    Your second question;What's the best way to deal with issues resolving a domain name that points to my external (Sky Hub) IP? (I've used additional host FQDNs for now which works)

    > You can create a DNS Request route to point to any specific DNS server from where the specific Host will be resolved. You can find it in Sophos UTM: Best practices for DNS Configuration. The other option is to create a DNS host which you've already implemented.

    I've checked the packetfilter.log and all the dropped packets had fwrule="60002" which means it was a default drop. 

    Logmark Table

    Logmark Value Iptables Chain Description Target
     60001 filter:INPUT Input Default Drop LOGDROP
     60002 filter:FORWARD   Forward Default Drop LOGDROP
     60003 filter:OUTPUT Output Default Drop LOGDROP 
     60004 filter:AUTO_INPUT   Forbidden SSH connects LOGDROP 
     60005 filter:AUTO_INPUT Forbidden WebAdmin connects  LOGDROP
    60006 filter:AUTO_INPUT Allowed WebAdmin connects (if logging enabled) LOGACCEPT
    60007 filter:INVALID_PKT Drop invalid packets LOGDROP
    60008 filter:SPOOF_DROP Drop spoofed packets LOGDROP
    60009 filter:STRICT_TCP_STATE Drop packets with suspicious tcp state LOGDROP
    60010 mangle:PREROUTING Log FTP data connections LOG


    You can read the KBA: Packetfilter logfiles on the Sophos UTM for more information on packetfilter logs.

    Regards

    Jaydeep

Children
Unfiltered HTML