Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 2517 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocked outgoing traffic

EDogVet
I was not able to print to the work computer over the ipsec site to site tunnel.  I looked at the logs and blocked packets.  I found: proto="17" length="106" tos="0x00" prec="0x00" ttl="127" srcport="55955" dstport="161" 
in reference to the printers ip.  I already had tcp port 445 allowed outbound.  I added tcp port 139.  I looked in the windows firewall and found it had icmp outbound traffic allowed for file and printer sharing.  After I allowed outbound icmp pings, the work printer came "online".

Which logs should I look at to trouble shoot outgoing traffic that is blocked?  From the above log info, what is proto="17"?

Thanks


This thread was automatically locked due to age.
Parents
  • 0
    Hi, IP Protocol 17 is UDP.

    (TCP & UDP) Port 161 is SNMP, which printers often use to report paper status, etc.

    The PacketFilter and IPS logs are where you should check first.

    If that's not enough, sniffers often come in handy. TCPDump is available on the Astaro console.

    Barry
Reply
  • 0
    Hi, IP Protocol 17 is UDP.

    (TCP & UDP) Port 161 is SNMP, which printers often use to report paper status, etc.

    The PacketFilter and IPS logs are where you should check first.

    If that's not enough, sniffers often come in handy. TCPDump is available on the Astaro console.

    Barry
Children
No Data