Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

Firewall dropped 443 ipv6 traffic

$
0
0

I was checking over my firewall logs and keep seeing this pop up:-

 

Nov 10 21:32:06 ubnt kernel: [wan_in-6-default-D]IN=eth0 OUT=eth1 MAC=80:2a:a8:8d:3b:44:0c:a4:02:5c:10:01:86:dd src=2a03:2880:f01a:0005:face:b00c:0000:0001 DST=2a02:0c7f:7013:d101:9832:3f53:9269:7ba8 LEN=136 TC=0 HOPLIMIT=57 FLOWLBL=982109 PROTO=TCP SPT=443 DPT=57249 WINDOW=114 RES=0x00 ACK URGP=0

 

set firewall ipv6-name wan_in-6 default-action drop
set firewall ipv6-name wan_in-6 description wan_in
set firewall ipv6-name wan_in-6 enable-default-log

 

eth0 is wan

 

eth1 is lan

 

set firewall ipv6-name wan_in-6 rule 1 description "Allow Enabled/Related state"
set firewall ipv6-name wan_in-6 rule 1 action accept
set firewall ipv6-name wan_in-6 rule 1 state established enable
set firewall ipv6-name wan_in-6 rule 1 state related enable


set firewall ipv6-name wan_in-6 rule 2 description "Allow ICMPv6"
set firewall ipv6-name wan_in-6 rule 2 action accept
set firewall ipv6-name wan_in-6 rule 2 log disable
set firewall ipv6-name wan_in-6 rule 2 protocol icmpv6


set firewall ipv6-name wan_in-6 rule 3 description "Drop Invalid state"
set firewall ipv6-name wan_in-6 rule 3 action drop
set firewall ipv6-name wan_in-6 rule 3 log enable
set firewall ipv6-name wan_in-6 rule 3 state invalid enable

 

set firewall ipv6-name wan_in-6 rule 7 description "Allow remote web ui"
set firewall ipv6-name wan_in-6 rule 7 action accept
set firewall ipv6-name wan_in-6 rule 7 log disable
set firewall ipv6-name wan_in-6 rule 7 destination port 443
set firewall ipv6-name wan_in-6 rule 7 protocol tcp

 

 

I put in rule 7 to try and shut it up but it keeps happening.. bit puzzled about A, why it's happening, B why I didn't shut it up with that rule. Do I have my ingress egress mixed up I wonder..


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>