I have been trying to find what causes the following packets to be dropped on my ASG. Originally I thought it was a faulty NIC on my external interface, changed that, no affect. Next I thought I tracked it down to a service definition problem, fixed that no change.
[FONT=monospace]12:06:47 Default DROP TCP 124.181.56.88 : 52950 → 61.9.129.145 : 80 [ACKFIN ] len=52 ttl=64 tos=0x00
[/FONT][FONT=monospace]12:06:48 Default DROP TCP 124.181.56.88 : 59139 → 12.129.210.41 : 80 [ACKFIN ] len=52 ttl=64 tos=0x00
[/FONT]
[FONT=monospace]12:07:01 Default DROP TCP 124.181.56.88 : 47720 → 61.9.129.159 : 80 [ACKFIN ] len=52 ttl=64 tos=0x00
[/FONT]
[FONT=monospace]12:07:02 Default DROP TCP 124.181.56.88 : 52950 → 61.9.129.145 : 80 [ACKFIN ] len=52 ttl=64 tos=0x00
[/FONT]
[FONT=monospace]12:07:03 Default DROP TCP 61.9.129.153 : 80 → 124.181.56.88 : 42790 [ACKFIN ] len=52 ttl=57 tos=0x00
[/FONT]
[FONT=monospace]12:07:04 Default DROP TCP 61.9.129.153 : 80 → 124.181.56.88 : 42790 [ACKFIN ] len=52 ttl=57 tos=0x00
[/FONT]
[FONT=monospace]12:07:05 Default DROP TCP 61.9.129.153 : 80 → 124.181.56.88 : 42790 [ACKFIN ] len=52 ttl=57 tos=0x00
[/FONT]
[FONT=monospace]12:07:28 Default DROP TCP 124.181.56.88 : 47720 → 61.9.129.159 : 80 [ACKFIN ] len=52 ttl=64 tos=0x00
[/FONT]
[FONT=monospace]12:07:30 Default DROP TCP 124.181.56.88 : 52950 → 61.9.129.145 : 80 [ACKFIN ] len=52 ttl=64 tos=0x00
[/FONT]
[FONT=monospace]12:07:43 Default DROP TCP 124.181.56.88 : 59139 → 12.129.210.41 : 80 [ACKFIN ] len=52 ttl=64 tos=0x00
[/FONT]
[FONT=monospace]12:09:08 Default DROP TCP 209.85.167.103 : 80 → 124.181.56.88 : 57015 [ACKFIN ] len=40 ttl=239 tos=0x00
[/FONT]
Packet filter log shows them being dropped under rule 6003.
Ian M
This thread was automatically locked due to age.
