Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 2493 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RST Packets on Astaro 8.309 with Commtouch

Rumak18
Hello,

for some weeks we encounter many RST Packets on the Astaro "Firewall" log:


2013:02:20-00:36:38 MYASTARO01-2 ulogd[5873]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0.2" srcmac="0:e[:D]6:92:b4:0" dstmac="0:50:56:b8:0:c" srcip="216.163.188.45" dstip="MYEXTERNALIP" proto="6" length="40" tos="0x00" prec="0x00" ttl="54" srcport="80" dstport="55192" tcpflags="RST"


These entries exist scattered through the whole day and approximately 500 entries a day. I cannot find any "SYN" Packets for this sessions, so i'm quite out of options at this point. 
Furthermore, the same thing happens to these addresses:
84.39.152.31 and 84.39.152.32


This thread was automatically locked due to age.
Parents
  • 0
    No...no solution. I also open a support request, but did not bring any solution. They guess that it's some sort of time out issue...but in fact, who knows it for sure? There were no tests made by Sophos support. It was just a deduction.
Reply
  • 0
    No...no solution. I also open a support request, but did not bring any solution. They guess that it's some sort of time out issue...but in fact, who knows it for sure? There were no tests made by Sophos support. It was just a deduction.
Children