Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 2 subscribers
  • Views 3448 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Any/Any/Any Rule Drops Packets

JTo
My ASG is dropping packets even though I have an any / any / any rule defined and on.  This rule is first in the list and all other rules are disabled.

This is an example from the log file:

2012:04:02-13:59:45 asg ulogd[5607]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth1" srcmac="78:ca:39:fb:1f:34" dstmac="d0:67:e5:ee:6e:af" srcip="17.172.116.48" dstip="192.168.2.5" proto="6" length="40" tos="0x00" prec="0x00" ttl="242" srcport="443" dstport="52238" tcpflags="ACK RST" 

It's apparently being dropped by fwrule 60001.  How do I cross reference that to something in the ASG that I can edit and change so that it doesn't drop these packets?

I also see fwrule 60003 dropping packets, too, in the log file.

Thanks!
Jason


This thread was automatically locked due to age.
Parents
  • 0
    Dropped ACK RST packets aren't usually a problem.

    There's some other threads about it on these forums if you're interested in more details.

    Why do you have an ANY/ANY/ANY rule? You're exposing your "firewalled" computers to the big bad internet.

    Barry
Reply
  • 0
    Dropped ACK RST packets aren't usually a problem.

    There's some other threads about it on these forums if you're interested in more details.

    Why do you have an ANY/ANY/ANY rule? You're exposing your "firewalled" computers to the big bad internet.

    Barry
Children
  • 0 in reply to BarryG
    Thanks, Barry.

    It's just temporary until I get this issue figured out.

    Insofar as NAT rules go, I only have a masquerading rule in place.  No DNAT or SNAT.  Is the lack of a DNAT rule the problem here?

    Jason