Unknown entries in System Logs-Port Forwarding!

[Khadanja]

1. Can someone please tell me what these entries are and how did they get here?


2. Also, I am trying to set up OpenVPN on TCP443 but can't as I keep getting this in logs -
Jul 31 00:44:04 ovpn-server1[15123]: TCP/UDP: Socket bind failed on local address [AF_INET6][undef]:443: Address already in use (errno=98)
Before someone replies I would like to mention that AiCloud is disabled.

 

[ColinTaylor]

1. The top entry is used when you are blocking certain devices from accessing the internet at certain time. The lower entries are created by you BitTorrent client.

2. Have you enabled web access to the router from the WAN?

 

[Khadanja]

1. The top entry is used when you are blocking certain devices from accessing the internet at certain time. The lower entries are created by you BitTorrent client.
2. Have you enabled web access to the router from the WAN?

1. I may have blocked a client just to test but not blocking any client anymore. I don't have Bittorrent client. Maybe someone else used it at some stage. How do I get rid of those entries?
2. No

 

[ColinTaylor]

1. Check out what is running on the device at 192.168.1.21. Reboot the router to clear the entries, but if the PC is still running the BitTorrent client it will probably just recreate them.

2. Try using a different port. Using common ports like 443 are generally a bad idea because they are a magnet for port scanners and hackers.

 

[RMerlin]

PCREDIRECT = Parental Control. It redirects clients under parental control to an error page if they are not within an allowed time period.

 

[Khadanja]

PCREDIRECT = Parental Control. It redirects clients under parental control to an error page if they are not within an allowed time period.

What about those other torrent entries. They won’t go away even after reboot of router n client on which I dint even have torrent client and today there a new entry related to whatsapp!!

 

[netware5]

.............
2. Also, I am trying to set up OpenVPN on TCP443 but can't as I keep getting this in logs -
Jul 31 00:44:04 ovpn-server1[15123]: TCP/UDP: Socket bind failed on local address [AF_INET6][undef]:443: Address already in use (errno=98)
Before someone replies I would like to mention that AiCloud is disabled.

The reason is that web access to the router is on port 443, so the port is already occupied and you cannot use it for OpenVPN server. It doesn't matter if you enabled WAN access or no. If you wish to use OpenVPN server on TCP port 443 you should change the port of Web GUI. I am in the same situation - for several reasons I need my OpenVPN server on TCP port 443, so I moved the web interface to another port.

 

[ColinTaylor]

What about those other torrent entries. They won’t go away even after reboot of router n client on which I dint even have torrent client and today there a new entry related to whatsapp!!

Sorry, we can only advise you on the function of the router. It's down to you to sort out the software on your client devices.

 

[dave14305]

View attachment 18943
What about those other torrent entries. They won’t go away even after reboot of router n client on which I dint even have torrent client and today there a new entry related to whatsapp!!

You can disable UPnP on the WAN page if you don’t need/want it.

 

[RMerlin]

View attachment 18943
What about those other torrent entries. They won’t go away even after reboot of router n client on which I dint even have torrent client and today there a new entry related to whatsapp!!

The entries will definitely disappear after a router reboot, UPNP forwards are not saved anywhere. However if your bittorrent client is still running, it will recreate these entries automatically once it reconnects to the router.

 

[Khadanja]

The entries will definitely disappear after a router reboot, UPNP forwards are not saved anywhere. However if your bittorrent client is still running, it will recreate these entries automatically once it reconnects to the router.

Bittorrent client not even installed on any devices and entries not disappearing after reboot.

 

[Khadanja]

The reason is that web access to the router is on port 443, so the port is already occupied and you cannot use it for OpenVPN server. It doesn't matter if you enabled WAN access or no. If you wish to use OpenVPN server on TCP port 443 you should change the port of Web GUI. I am in the same situation - for several reasons I need my OpenVPN server on TCP port 443, so I moved the web interface to another port.

My web access is Set to No and local access is HTTPS on port 8443 still can’t use 443 for OpenVPN!!

 

[netware5]

My web access is Set to No and local access is HTTPS on port 8443 still can’t use 443 for OpenVPN!!

Do you have AiCloud enabled? If yes, you should either disable it or change its port to something else. The default port for AiCloud is 443, if it is enabled the port is occupied.

And one general remark regarding WAN access - it doesn't matter if it is enabled or no. Even the service is enabled only for local access, the relevant port is still occupied. But on your case as the https access is on 8443 this is not a problem. Look for AiCloud - it is guilty most probably.

 

[Khadanja]

Do you have AiCloud enabled? If yes, you should either disable it or change its port to something else. The default port for AiCloud is 443, if it is enabled the port is occupied.

And one general remark regarding WAN access - it doesn't matter if it is enabled or no. Even the service is enabled only for local access, the relevant port is still occupied. But on your case as the https access is on 8443 this is not a problem. Look for AiCloud - it is guilty most probably.

As mentioned in my first post AiCloud is disabled, that’s the first thing I checked.

 

[dave14305]

As mentioned in my first post AiCloud is disabled, that’s the first thing I checked.

Can you ssh to the router and run

netstat -nlp | grep 443

Do you have IPv6? It seems the AF_INET6 error would relate to IPv6 sockets.

 

[Khadanja]

Ran code which shows 443 TCP being used by pixelserv-tls. Completely forgot about it. Wonder if it can be moved to different port?

 

[dave14305]

Ran code which shows 443 TCP being used by pixelserv-tls. Completely forgot about it. Wonder if it can be moved to different port?

No, it won’t do much good intercepting https ads on a port other than 443.

But it’s not (or should not be) listening on the main router IP, just the dedicated pixelserv IP (e.g. 192.168.1.2).

 

[Vexira]

Bittorrent client not even installed on any devices and entries not disappearing after reboot.

Some steam games use bit torrent, like Survarium, it's launcher uses it to download updates.

 

[Khadanja]

No, it won’t do much good intercepting https ads on a port other than 443.

But it’s not (or should not be) listening on the main router IP, just the dedicated pixelserv IP (e.g. 192.168.1.2).

Ok I’m concerned now. If pixelserv is not listening then why can’t I use the port for openvpn? Below is the result of that command? So its listening on 192.168.1.2? Still it remains a mystery then why I can’t use 443 for openVPN?
tcp 0 0 192.168.1.2:443 0.0.0.0:* LISTEN 1075/pixelserv-tls
tcp 0 0 127.0.0.1:8443 0.0.0.0:* LISTEN 259/httpds
tcp 0 0 192.168.1.1:8443 0.0.0.0:* LISTEN 259/httpds

 

[ColinTaylor]

Ok I’m concerned now. If pixelserv is not listening then why can’t I use the port for openvpn? Below is the result of that command? So its listening on 192.168.1.2? Still it remains a mystery then why I can’t use 443 for openVPN?
tcp 0 0 192.168.1.2:443 0.0.0.0:* LISTEN 1075/pixelserv-tls
tcp 0 0 127.0.0.1:8443 0.0.0.0:* LISTEN 259/httpds
tcp 0 0 192.168.1.1:8443 0.0.0.0:* LISTEN 259/httpds

https://www.snbforums.com/threads/openvpn-on-port-tcp-80-failed.41931/#post-386539