Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What percentage of your overall traffic is blocked?

    Scheduled Pinned Locked Moved Firewalling
    12 Posts 6 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      kind of a pointless questions, its like asking how many stairs do you have in your house or how many windows.

      Which direction even?

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • W
        W4RH34D
        last edited by

        Well life is pointless too but there's questions…

        I was kinda shocked honestly.  32% of our bandwidth is going to unsolicited traffic that ends up being blocked.

        It really still is the wild west over the wire still.

        Did you really check your cables?

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          that seems really really high.. Unless your not actually doing anything with your bandwidth..

          how exactly did you come up with this number?  And what are you dropping?  Is it udp, tcp?  What ports?  What is in the traffic?  32% of your pipe in noise seems like an attack..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • W
            W4RH34D
            last edited by

            @johnpoz:

            that seems really really high.. Unless your not actually doing anything with your bandwidth..

            how exactly did you come up with this number?  And what are you dropping?  Is it udp, tcp?  What ports?  What is in the traffic?  32% of your pipe in noise seems like an attack..

            Well I've had to learn pfsense and splunk because things have been going so smoothly…
            I know something is up I just don't know what.

            I'll grab some stuff here in a bit.  But the last thing that caught my eye was a ton of "private ip scope" traffic being bounced at the wan port.

            Did you really check your cables?

            1 Reply Last reply Reply Quote 0
            • M
              mer
              last edited by

              Depending on exactly how and what your WAN is connected to, that really may not mean anything.  It could simply mean you are seeing a lot of traffic that is from your ISP network (as if your WAN is connected to a bridge mode device) or your ISP "doesn't do IPV6 very well".
              A quick screenshot of the WAN rules and the firewall log will help everyone trying to help you.

              johnpoz:
              14 steps and 22 windows.

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                I block everything…  Going in and out.  Just to be safe (-;

                1 Reply Last reply Reply Quote 0
                • W
                  W4RH34D
                  last edited by

                  My wan rules list is too big to screen cap.

                  It's basically just PFBlocker rules blocking everything not the US.

                  Did you really check your cables?

                  1 Reply Last reply Reply Quote 0
                  • W
                    W4RH34D
                    last edited by

                    Yay.  Was having an issue with the machine hosting the file share.  I reboot around 3 times within 40 minutes.  On the third boot the admin password has somehow been changed.  Completely locked out of the machine.  Had to turn off the network port to it.

                    This is so fun!  >:(

                    Did you really check your cables?

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      Since I have very few inbound ports, I would say that about 99.99% of my inbound connections are blocked.

                      The percentage would be a bit less if I am traveling and using the VPN.

                      It sounds like you should reconsider your security design.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        he is not talking % blocked vs % allowed but % in bandwidth that is blocked… This number should be almost invisible..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.