I log the dropped packets.
I see entries like this:
Dec 25 17:05:42 kernel: DROP IN=eth3 OUT= MAC=14:da:e9:f9:0a:b0:00:01:5c:33:86:c1:08:00 SRC=212.116.159.146 DST=MYWANIPADRESS LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=59975 PROTO=TCP SPT=29666 DPT=22 SEQ=723775345 ACK=1976039383 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B401010402)
or
Dec 25 16:59:44 kernel: DROP IN=eth3 OUT= MAC=14:da:e9:f9:0a:b0:00:01:5c:33:86:c1:08:00 SRC=188.237.169.62 DST=MYWANIPADRESS LEN=28 TOS=0x00 PREC=0x00 TTL=117 ID=21237 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=40325
what does it mean? Are they ACK Files who get droped? Are they outgoing or incoming? Do I have something to do to avoid it?
I see entries like this:
Dec 25 17:05:42 kernel: DROP IN=eth3 OUT= MAC=14:da:e9:f9:0a:b0:00:01:5c:33:86:c1:08:00 SRC=212.116.159.146 DST=MYWANIPADRESS LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=59975 PROTO=TCP SPT=29666 DPT=22 SEQ=723775345 ACK=1976039383 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B401010402)
or
Dec 25 16:59:44 kernel: DROP IN=eth3 OUT= MAC=14:da:e9:f9:0a:b0:00:01:5c:33:86:c1:08:00 SRC=188.237.169.62 DST=MYWANIPADRESS LEN=28 TOS=0x00 PREC=0x00 TTL=117 ID=21237 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=40325
what does it mean? Are they ACK Files who get droped? Are they outgoing or incoming? Do I have something to do to avoid it?