Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 2 subscribers
  • Views 3448 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Any/Any/Any Rule Drops Packets

JTo
My ASG is dropping packets even though I have an any / any / any rule defined and on.  This rule is first in the list and all other rules are disabled.

This is an example from the log file:

2012:04:02-13:59:45 asg ulogd[5607]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth1" srcmac="78:ca:39:fb:1f:34" dstmac="d0:67:e5:ee:6e:af" srcip="17.172.116.48" dstip="192.168.2.5" proto="6" length="40" tos="0x00" prec="0x00" ttl="242" srcport="443" dstport="52238" tcpflags="ACK RST" 

It's apparently being dropped by fwrule 60001.  How do I cross reference that to something in the ASG that I can edit and change so that it doesn't drop these packets?

I also see fwrule 60003 dropping packets, too, in the log file.

Thanks!
Jason


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to BAlfson
    I am drooling with excitement!  

    What you're saying is that a new rule defined to let all incoming traffic with a source port of 443 (HTTPS) and a destination port of (some range since traffic is destined for more than 52238" with a TCP flag of "ACK RST" should pass.

    Ok.  I get it!

    Now, where and how do I define such a rule?  If you could provide me with a little hand holding, I would appreciate it.

    Thanks!