This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Country blocking failing

I have 4 UTMs, only 2 suffer this blocking failure. Both UTMs that fail to block a range of IP are running VOIP with tight enabled.

The addresses start with 222 or 117 or 202 or 182 or 61 and that is just since the 18th of Feb 2015.
They all seem to be using privoxy (8118) as the protocol. I have that blocked and also logging disabled on all the packet filter rules I have created.
The other question is how can I have packets without an address, see the attachment.

Ian

This thread was automatically locked due to age.

0 BarryG over 10 years ago

Hi Ian, which chart is the image of?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 10 years ago in reply to BarryG

Hi Barry,
the network protection summary tab in webadmin.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Amodin over 10 years ago

Ian,

That should be the same view where it is just showing your dropped packets. I see the same thing with my Network Protection summary, with China blocked. I believe you will still see the attempts as part of the traffic, but that should just be showing the dropped packets to you.
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 10 years ago in reply to Amodin

Hi,
your assumption is correct if you have logging enabled. Now I don't have logging enabled on my packet filter rules, but the auto generated rules might be different?

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 10 years ago

All auto drop rules log.

Barry
Cancel
Vote Up 0 Vote Down

Cancel