Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 1002 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro dropping packets from ctmail.com

DriveRaider
I am running 9.100-16 with a home license. I do have the SMTP proxy enabled. Every hour I see 9 packets drop as shown below in Splunk:

May 17 23:15:33 192.168.1.254 2013:05:17-23:15:27 ulogd[4641]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth3" srcmac="0:90:1a:42:f4:f5" dstmac="0:c:29:9c:12:77" srcip="216.163.188.45" dstip="***.***.***.***" proto="6" length="40" tos="0x00" prec="0x00" ttl="56" srcport="80" dstport="54627" tcpflags="RST"

"dstip" is my external public facing IP.


This thread was automatically locked due to age.
Parents
  • 0
    It's a RST packet, so I guess the UTM thinks it ended the conversation earlier and doesn't want to restart it.  Unless you have another, related problem, I think this is "normal" traffic.

    Cheers - Bob
Reply
  • 0
    It's a RST packet, so I guess the UTM thinks it ended the conversation earlier and doesn't want to restart it.  Unless you have another, related problem, I think this is "normal" traffic.

    Cheers - Bob
Children
No Data