This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Any clue what thoses packets are?

My FW keep dropping thoses packets:

Default DROP 2 10.33.200.1 → 224.0.0.1

len=28 ttl=1 tos=0x00 srcmac=00:00:00:00:00:00 dstmac=00:15:5d:01:0a:0b

I have no idea what 10.33.200.1 or 224.0.0.1 are...

Thanks

This thread was automatically locked due to age.

Parents

0 UrsWeiss over 15 years ago

10.x.x.x is a private address (Private network - Wikipedia, the free encyclopedia)
224.x.x.x is a multicast address (Multicast address - Wikipedia, the free encyclopedia)
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 UrsWeiss over 15 years ago

10.x.x.x is a private address (Private network - Wikipedia, the free encyclopedia)
224.x.x.x is a multicast address (Multicast address - Wikipedia, the free encyclopedia)
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 x-cimo over 15 years ago in reply to UrsWeiss

Yes, but I have no 10.33.X.X host ...?!? [:(]
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 15 years ago in reply to x-cimo

Hi,
what address ranges do you use internally?

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 x-cimo over 15 years ago in reply to RFCat_vk_01

10.100.0.0/16

It seem that this 10.33.200.1 host would be on the WAN side... so maybe something my ISP has or something. Im using a cable modem.
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 15 years ago in reply to x-cimo

Hi,
what IP address shows up on your external interface. Your ISP could be using the 10.x.x.x range through a proxy.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 x-cimo over 15 years ago in reply to RFCat_vk_01

You got it..

My ip is 74.... but, I created rules from the WAN for 10.33.200.1

It seem that my ISP has some 10.X ips on my WAN and for some reason they are senting IGMP multicast packet to me.... So i created a drop rules without logging so Astaro stop logging thoses every one minutes.

Thanks [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 15 years ago in reply to x-cimo

You got it..

My ip is 74....   but, I created rules from the WAN for 10.33.200.1

It seem that my ISP has some 10.X ips on my WAN and for some reason they are senting IGMP multicast packet to me....   So i created a drop rules without logging so Astaro stop logging thoses every one minutes.

Thanks [:)]

The Private addresses on the Wan interface of a Cable Internet service are pretty common here; the ISPs use them internally for infrastructure, and they often have devices misconfigured, so you end up with these drops; nothing to be concerned about.  Same with the Multicast drops.
Cancel
Vote Up 0 Vote Down

Cancel