What's new
By:

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

What trigger firewall to drop packet?

hamwong

hamwong

Occasional Visitor
I am currently using ASUS AC88U with firmware 384.7, I found log have many firewall log that drop packet from 162.125.34.129, and I try whois found IP belongs to dropbox, I don't know who is the real destination client IP, but I am very interest why firewall will drop pack et from dropbox?

P.S. also have packet from apple 17.173.254.223


Oct 29 06:54:05 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=35695 DF PROTO=TCP SPT=443 DPT=12681 SEQ=3426399936 ACK=1744454676 WINDOW=68 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:06 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=35696 DF PROTO=TCP SPT=443 DPT=12681 SEQ=3426399936 ACK=1744454676 WINDOW=68 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:08 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=35697 DF PROTO=TCP SPT=443 DPT=12681 SEQ=3426399936 ACK=1744454676 WINDOW=68 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:11 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=35698 DF PROTO=TCP SPT=443 DPT=12681 SEQ=3426399936 ACK=1744454676 WINDOW=68 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:18 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=35699 DF PROTO=TCP SPT=443 DPT=12681 SEQ=3426399936 ACK=1744454676 WINDOW=68 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:28 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=104 TOS=0x00 PREC=0x20 TTL=52 ID=60808 DF PROTO=TCP SPT=443 DPT=10576 SEQ=4133629555 ACK=2910233941 WINDOW=83 RES=0x00 ACK URGP=0
Oct 29 06:54:30 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=54799 DF PROTO=TCP SPT=443 DPT=11761 SEQ=1311423814 ACK=1531733574 WINDOW=85 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:30 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=54800 DF PROTO=TCP SPT=443 DPT=11761 SEQ=1311423814 ACK=1531733574 WINDOW=85 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:30 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=54801 DF PROTO=TCP SPT=443 DPT=11761 SEQ=1311423814 ACK=1531733574 WINDOW=85 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:31 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=54802 DF PROTO=TCP SPT=443 DPT=11761 SEQ=1311423814 ACK=1531733574 WINDOW=85 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:32 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=296 TOS=0x00 PREC=0x20 TTL=52 ID=35700 DF PROTO=TCP SPT=443 DPT=12681 SEQ=3426399936 ACK=1744454676 WINDOW=68 RES=0x00 ACK URGP=0
Oct 29 06:54:33 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=54803 DF PROTO=TCP SPT=443 DPT=11761 SEQ=1311423814 ACK=1531733574 WINDOW=85 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:37 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=54804 DF PROTO=TCP SPT=443 DPT=11761 SEQ=1311423814 ACK=1531733574 WINDOW=85 RES=0x00 ACK PSH URGP=0
Oct 29 06:54:44 kernel: DROP IN=eth0 OUT= MAC=18:31:bf:5b:12:e8:00:00:5e:00:01:85:08:00 SRC=162.125.34.129 DST=203.XXX.XXX.XXX LEN=297 TOS=0x00 PREC=0x20 TTL=52 ID=54805 DF PROTO=TCP SPT=443 DPT=11761 SEQ=1311423814 ACK=1531733574 WINDOW=85 RES=0x00 ACK PSH URGP=0
O
 
You must log in or register to reply here.

Similar threads

adri
Firewall, Port Forwarding, and DoS Question
Replies
8
Views
1K
ColinTaylor
C
T
Solved RT-BE92U connections in AIMesh nodes intermittently dropped (Caused by FW 3.0.0.6 not compatible with FW 3.0.0.4 routers))
Replies
9
Views
2K
jksmurf
J
SkierInAvon
Very Strange WAN Login Entry…WAN Routing 192.168.1.20??? HUH?
Replies
6
Views
459
SkierInAvon
SkierInAvon
J
Skynet Skynet - Blocked outbounds coming from the router itself?
Replies
12
Views
1K
JuanGF
J
P
Skynet show inbound block on Digital TV Vlan300
Replies
4
Views
1K
poudenes
P
Similar threads
Thread starter Title Forum Replies Date
S openvpn-event trigger Asuswrt-Merlin 1
A Possibilities to trigger storage ejection remotely? (a more graceful hard shutdown/reboot) Asuswrt-Merlin 11
C Firewall URL filter bypassed by guest networks with disabled intranet access Asuswrt-Merlin 4
S Firewall rule to block firmware updates Asuswrt-Merlin 5
D Entware [AX86U Merlin 3004.388.9_2] Disabling Firewall in WebUI allows Transmission to open the famous closed port, but WebUI Port Forwarding does not. Asuswrt-Merlin 1
R ipv6 / firewall on ax86u pro (on latest Merlin) Asuswrt-Merlin 6
B BE88U Firewall port forwarding set in GUI not working. Anyone else? Asuswrt-Merlin 2
W Whitelisting VoIP IP addresses Firewall Asuswrt-Merlin 0
adri Firewall, Port Forwarding, and DoS Question Asuswrt-Merlin 8
Z Dual WAN + Dual Firewall Asuswrt-Merlin 11

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 723 (members: 12, guests: 711)
Back
Top
✖