Error connecting third part VPN

hugoeyng · Feb 18, 2022, 5:27 PM

@viragomann Thank you for your answer.

If I try to connect a VPN (third part) connecting my computer directly to the internet, ignoring pfSense, I can connect.

But when I try to connect passing pfSense, than it is not possible.

The problem started after upgrading pfsense.

I have no rules regarding VPN except the rule OpenVPN itself (created by pfsense wizard). And I understand that the configuration of my OpenVPN has nothing to do to the problem I am facing.

"To sniff" ? I tried "package capture", but i am not able to understand what is captured.

viragomann · Feb 18, 2022, 5:35 PM

@hugoeyng said in Error connecting third part VPN:

"To sniff" ? I tried "package capture", but i am not able to understand what is captured.

Set the port filter to the port your VPN client tries to connect to.
Start the capture, try to connect and check the result after.
Ensure that the source IP is your WAN IP and that the server is responding properly.

hugoeyng · Feb 18, 2022, 8:58 PM

@viragomann The package capture seems to be ok

17:52:27.607951 IP 187.85.170.141.1194 > 192.168.2.3.22674: UDP, length 42
17:52:28.232478 IP 192.168.2.3.22674 > 187.85.170.141.1194: UDP, length 42
17:52:28.234393 IP 187.85.170.141.1194 > 192.168.2.3.22674: UDP, length 50
17:54:07.454896 IP 192.168.2.3.23127 > 187.85.170.141.1194: UDP, length 42
17:54:07.456405 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 54
17:54:09.109536 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 42
17:54:09.641642 IP 192.168.2.3.23127 > 187.85.170.141.1194: UDP, length 42
17:54:09.643058 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 50
17:54:13.031068 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 42
17:54:13.989174 IP 192.168.2.3.23127 > 187.85.170.141.1194: UDP, length 42
17:54:13.990680 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 50
17:54:21.460277 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 42
17:54:21.635909 IP 192.168.2.3.23127 > 187.85.170.141.1194: UDP, length 42
17:54:21.637229 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 50
17:54:37.343538 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 42
17:54:37.679769 IP 192.168.2.3.23127 > 187.85.170.141.1194: UDP, length 42
17:54:37.681032 IP 187.85.170.141.1194 > 192.168.2.3.23127: UDP, length 50
17:56:17.362165 IP 192.168.2.3.46956 > 187.85.170.141.1194: UDP, length 42
17:56:17.363554 IP 187.85.170.141.1194 > 192.168.2.3.46956: UDP, length 54
17:56:19.095246 IP 187.85.170.141.1194 > 192.168.2.3.46956: UDP, length 42
17:56:19.420223 IP 192.168.2.3.46956 > 187.85.170.141.1194: UDP, length 42
17:56:19.421562 IP 187.85.170.141.1194 > 192.168.2.3.46956: UDP, length 50
17:56:23.538085 IP 192.168.2.3.46956 > 187.85.170.141.1194: UDP, length 42
17:56:23.539334 IP 187.85.170.141.1194 > 192.168.2.3.46956: UDP, length 54

hugoeyng · Feb 18, 2022, 9:27 PM

@viragomann I found out that, even I having access to the Internet, I can not ping any Internet IP. Not even my own internet IP.
:()

viragomann · Feb 19, 2022, 1:46 PM

@hugoeyng
No need to know the servers public IP. You may hide it.

So 192.168.2.3. is the WAN IP of pfSense? That would mean, there is a router in front of it, right?

hugoeyng · Feb 19, 2022, 1:46 PM

@viragomann I will hide next time. Thank you.

192.168.2.3 is one of the two WAN IP (ethernet)
Yes, there is a router in front of the FW

viragomann · Feb 19, 2022, 5:21 PM

@hugoeyng
So the capture shows a quite normal OpenVPN connection in my eyes.
And it doesn't seem to me that this matches to the behavior of the client log you posted above at all.

I found out that, even I having access to the Internet, I can not ping any Internet

What does this mean?

Since you have two WAN connections, it is a good advice to turn of one, while troubleshooting the other one to get clear results.

hugoeyng · Feb 21, 2022, 1:18 PM

@viragomann Hi
Turnning of one:

10:14:28.757248 IP (tos 0x0, ttl 128, id 21236, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:28.759436 IP (tos 0x0, ttl 60, id 26377, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.4.7.47328: UDP, length 54
10:14:29.527245 IP (tos 0x0, ttl 128, id 21237, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:30.541613 IP (tos 0x0, ttl 128, id 21238, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:30.793488 IP (tos 0x0, ttl 60, id 26440, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.47328: UDP, length 42
10:14:31.541759 IP (tos 0x0, ttl 128, id 21239, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:32.552494 IP (tos 0x0, ttl 128, id 21240, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:32.749489 IP (tos 0x0, ttl 60, id 26603, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.34587: UDP, length 42
10:14:33.554981 IP (tos 0x0, ttl 128, id 21241, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:34.589222 IP (tos 0x0, ttl 128, id 21242, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:34.793490 IP (tos 0x0, ttl 60, id 26721, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.47328: UDP, length 42
10:14:35.605955 IP (tos 0x0, ttl 128, id 21243, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:36.609190 IP (tos 0x0, ttl 128, id 21244, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:37.612531 IP (tos 0x0, ttl 128, id 21245, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.47328 > 999.999.99.999.1194: UDP, length 42
10:14:38.973957 IP (tos 0x0, ttl 128, id 52992, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:38.975727 IP (tos 0x0, ttl 60, id 26943, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.4.7.23262: UDP, length 54
10:14:39.550543 IP (tos 0x0, ttl 128, id 52993, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:40.552038 IP (tos 0x0, ttl 128, id 52994, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:41.558462 IP (tos 0x0, ttl 128, id 52995, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:41.559801 IP (tos 0x0, ttl 60, id 27135, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.23262: UDP, length 42
10:14:41.732734 IP (tos 0x0, ttl 60, id 27139, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.25586: UDP, length 42
10:14:42.559164 IP (tos 0x0, ttl 128, id 52996, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:42.748684 IP (tos 0x0, ttl 60, id 27227, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.47328: UDP, length 42
10:14:43.563824 IP (tos 0x0, ttl 128, id 52997, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:44.563765 IP (tos 0x0, ttl 128, id 52998, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:45.568125 IP (tos 0x0, ttl 128, id 52999, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:45.569987 IP (tos 0x0, ttl 60, id 27391, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.23262: UDP, length 42
10:14:46.593592 IP (tos 0x0, ttl 128, id 53000, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:47.710127 IP (tos 0x0, ttl 128, id 53001, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23262 > 999.999.99.999.1194: UDP, length 42
10:14:48.839225 IP (tos 0x0, ttl 128, id 45575, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:48.841074 IP (tos 0x0, ttl 60, id 27445, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.4.7.28007: UDP, length 54
10:14:49.548059 IP (tos 0x0, ttl 128, id 45576, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:50.561026 IP (tos 0x0, ttl 128, id 45577, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:50.804072 IP (tos 0x0, ttl 60, id 27617, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.28007: UDP, length 42
10:14:51.570856 IP (tos 0x0, ttl 128, id 45578, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:52.584794 IP (tos 0x0, ttl 128, id 45579, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:53.690850 IP (tos 0x0, ttl 128, id 45580, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:53.730084 IP (tos 0x0, ttl 60, id 27782, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.23262: UDP, length 42
10:14:54.593988 IP (tos 0x0, ttl 128, id 45581, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:54.793087 IP (tos 0x0, ttl 60, id 27865, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.28007: UDP, length 42
10:14:55.624383 IP (tos 0x0, ttl 128, id 45582, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:56.610196 IP (tos 0x0, ttl 128, id 45583, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:57.625992 IP (tos 0x0, ttl 128, id 45584, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.28007 > 999.999.99.999.1194: UDP, length 42
10:14:58.766313 IP (tos 0x0, ttl 60, id 28216, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.47328: UDP, length 42
10:14:58.796884 IP (tos 0x0, ttl 128, id 60933, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:14:58.799291 IP (tos 0x0, ttl 60, id 28218, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.4.7.23935: UDP, length 54
10:14:59.550511 IP (tos 0x0, ttl 128, id 60934, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:00.552127 IP (tos 0x0, ttl 128, id 60935, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:00.780229 IP (tos 0x0, ttl 60, id 28343, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.23935: UDP, length 42
10:15:01.557194 IP (tos 0x0, ttl 128, id 60936, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:02.571149 IP (tos 0x0, ttl 128, id 60937, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:03.226305 IP (tos 0x0, ttl 60, id 28586, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.28007: UDP, length 42
10:15:03.585266 IP (tos 0x0, ttl 128, id 60938, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:04.588489 IP (tos 0x0, ttl 128, id 60939, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:04.757282 IP (tos 0x0, ttl 60, id 28712, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.23935: UDP, length 42
10:15:05.596238 IP (tos 0x0, ttl 128, id 60940, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:06.638650 IP (tos 0x0, ttl 128, id 60941, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:07.609197 IP (tos 0x0, ttl 128, id 60942, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.23935 > 999.999.99.999.1194: UDP, length 42
10:15:08.824887 IP (tos 0x0, ttl 128, id 51239, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:08.826571 IP (tos 0x0, ttl 60, id 28915, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.4.7.3644: UDP, length 54
10:15:09.565581 IP (tos 0x0, ttl 128, id 51240, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:10.279109 IP (tos 0x0, ttl 60, id 28933, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.23262: UDP, length 42
10:15:10.571989 IP (tos 0x0, ttl 128, id 51241, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:10.976390 IP (tos 0x0, ttl 60, id 28982, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.3644: UDP, length 42
10:15:11.605927 IP (tos 0x0, ttl 128, id 51242, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:12.584510 IP (tos 0x0, ttl 128, id 51243, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:12.752484 IP (tos 0x0, ttl 60, id 29015, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.23935: UDP, length 42
10:15:13.589707 IP (tos 0x0, ttl 128, id 51244, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:14.624551 IP (tos 0x0, ttl 128, id 51245, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:14.901796 IP (tos 0x0, ttl 60, id 29073, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.3644: UDP, length 42
10:15:15.604228 IP (tos 0x0, ttl 128, id 51246, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:16.614026 IP (tos 0x0, ttl 128, id 51247, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:17.614812 IP (tos 0x0, ttl 128, id 51248, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.3644 > 999.999.99.999.1194: UDP, length 42
10:15:18.792002 IP (tos 0x0, ttl 128, id 42580, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:18.793822 IP (tos 0x0, ttl 60, id 29445, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.4.7.45596: UDP, length 54
10:15:18.832828 IP (tos 0x0, ttl 60, id 29448, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.28007: UDP, length 42
10:15:19.547201 IP (tos 0x0, ttl 128, id 42581, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:20.575582 IP (tos 0x0, ttl 128, id 42582, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:20.950857 IP (tos 0x0, ttl 60, id 29560, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.45596: UDP, length 42
10:15:21.570048 IP (tos 0x0, ttl 128, id 42583, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:22.568892 IP (tos 0x0, ttl 128, id 42584, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:22.827899 IP (tos 0x0, ttl 60, id 29577, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.3644: UDP, length 42
10:15:23.570197 IP (tos 0x0, ttl 128, id 42585, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:24.588066 IP (tos 0x0, ttl 128, id 42586, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:24.940089 IP (tos 0x0, ttl 60, id 29763, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.45596: UDP, length 42
10:15:25.584509 IP (tos 0x0, ttl 128, id 42587, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:26.575903 IP (tos 0x0, ttl 128, id 42588, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:27.615817 IP (tos 0x0, ttl 128, id 42589, offset 0, flags [none], proto UDP (17), length 70)
192.168.4.7.45596 > 999.999.99.999.1194: UDP, length 42
10:15:28.747116 IP (tos 0x0, ttl 60, id 29855, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.4.7.23935: UDP, length 42

hugoeyng · Feb 21, 2022, 1:24 PM

10:19:46.086998 IP (tos 0x0, ttl 59, id 48095, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.6796: UDP, length 42
10:19:46.146749 IP (tos 0x0, ttl 128, id 2632, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.6796 > 999.999.99.999.1194: UDP, length 42
10:19:47.155552 IP (tos 0x0, ttl 128, id 2633, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.6796 > 999.999.99.999.1194: UDP, length 42
10:19:48.162598 IP (tos 0x0, ttl 128, id 2634, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.6796 > 999.999.99.999.1194: UDP, length 42
10:19:49.164088 IP (tos 0x0, ttl 128, id 2635, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.6796 > 999.999.99.999.1194: UDP, length 42
10:19:50.089074 IP (tos 0x0, ttl 59, id 48438, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.6796: UDP, length 42
10:19:50.176260 IP (tos 0x0, ttl 128, id 2636, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.6796 > 999.999.99.999.1194: UDP, length 42
10:19:51.173224 IP (tos 0x0, ttl 128, id 2637, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.6796 > 999.999.99.999.1194: UDP, length 42
10:19:52.177374 IP (tos 0x0, ttl 128, id 2638, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.6796 > 999.999.99.999.1194: UDP, length 42
10:19:53.184143 IP (tos 0x0, ttl 128, id 2639, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.6796 > 999.999.99.999.1194: UDP, length 42
10:19:54.394739 IP (tos 0x0, ttl 128, id 47602, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:19:54.397025 IP (tos 0x0, ttl 59, id 48527, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.2.3.2431: UDP, length 54
10:19:55.146394 IP (tos 0x0, ttl 128, id 47603, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:19:56.148060 IP (tos 0x0, ttl 128, id 47604, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:19:56.151177 IP (tos 0x0, ttl 59, id 48608, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.2431: UDP, length 42
10:19:57.156955 IP (tos 0x0, ttl 128, id 47605, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:19:58.090773 IP (tos 0x0, ttl 59, id 48789, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.6796: UDP, length 42
10:19:58.159428 IP (tos 0x0, ttl 128, id 47606, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:19:59.160070 IP (tos 0x0, ttl 128, id 47607, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:19:59.870302 IP (tos 0x0, ttl 59, id 48885, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.2431: UDP, length 42
10:20:00.165609 IP (tos 0x0, ttl 128, id 47608, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:20:01.180120 IP (tos 0x0, ttl 128, id 47609, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:20:02.183173 IP (tos 0x0, ttl 128, id 47610, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:20:03.184456 IP (tos 0x0, ttl 128, id 47611, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.2431 > 999.999.99.999.1194: UDP, length 42
10:20:04.410306 IP (tos 0x0, ttl 128, id 43506, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:04.414401 IP (tos 0x0, ttl 59, id 49193, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.2.3.26996: UDP, length 54
10:20:05.174175 IP (tos 0x0, ttl 128, id 43507, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:06.132601 IP (tos 0x0, ttl 59, id 49286, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.26996: UDP, length 42
10:20:06.181463 IP (tos 0x0, ttl 128, id 43508, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:07.196153 IP (tos 0x0, ttl 128, id 43509, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:07.779571 IP (tos 0x0, ttl 59, id 49322, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.2431: UDP, length 42
10:20:08.199225 IP (tos 0x0, ttl 128, id 43510, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:09.198349 IP (tos 0x0, ttl 128, id 43511, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:10.132621 IP (tos 0x0, ttl 59, id 49378, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.26996: UDP, length 42
10:20:10.203019 IP (tos 0x0, ttl 128, id 43512, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:11.210777 IP (tos 0x0, ttl 128, id 43513, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:12.216394 IP (tos 0x0, ttl 128, id 43514, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:13.221697 IP (tos 0x0, ttl 128, id 43515, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.26996 > 999.999.99.999.1194: UDP, length 42
10:20:14.249550 IP (tos 0x0, ttl 59, id 49669, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.6796: UDP, length 42
10:20:14.393979 IP (tos 0x0, ttl 128, id 30020, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:14.397562 IP (tos 0x0, ttl 59, id 49683, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.2.3.18876: UDP, length 54
10:20:15.169962 IP (tos 0x0, ttl 128, id 30021, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:16.177712 IP (tos 0x0, ttl 128, id 30022, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:16.179825 IP (tos 0x0, ttl 59, id 49767, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.18876: UDP, length 42
10:20:17.186696 IP (tos 0x0, ttl 128, id 30023, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:18.129793 IP (tos 0x0, ttl 59, id 49792, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.26996: UDP, length 42
10:20:18.203037 IP (tos 0x0, ttl 128, id 30024, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:19.209381 IP (tos 0x0, ttl 128, id 30025, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:19.747795 IP (tos 0x0, ttl 59, id 49954, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.18876: UDP, length 42
10:20:20.211480 IP (tos 0x0, ttl 128, id 30026, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:21.215498 IP (tos 0x0, ttl 128, id 30027, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:22.216856 IP (tos 0x0, ttl 128, id 30028, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:23.235147 IP (tos 0x0, ttl 128, id 30029, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.18876 > 999.999.99.999.1194: UDP, length 42
10:20:23.764005 IP (tos 0x0, ttl 59, id 50176, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.2431: UDP, length 42
10:20:24.411394 IP (tos 0x0, ttl 128, id 1888, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:24.415822 IP (tos 0x0, ttl 59, id 50216, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.2.3.14896: UDP, length 54
10:20:25.179887 IP (tos 0x0, ttl 128, id 1889, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:26.185006 IP (tos 0x0, ttl 128, id 1890, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:26.189243 IP (tos 0x0, ttl 59, id 50375, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.14896: UDP, length 42
10:20:27.189194 IP (tos 0x0, ttl 128, id 1891, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:28.188276 IP (tos 0x0, ttl 128, id 1892, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:28.750135 IP (tos 0x0, ttl 59, id 50505, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.18876: UDP, length 42
10:20:29.201960 IP (tos 0x0, ttl 128, id 1893, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:30.206775 IP (tos 0x0, ttl 128, id 1894, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:30.211214 IP (tos 0x0, ttl 59, id 50558, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.14896: UDP, length 42
10:20:31.212281 IP (tos 0x0, ttl 128, id 1895, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:32.216155 IP (tos 0x0, ttl 128, id 1896, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:33.222099 IP (tos 0x0, ttl 128, id 1897, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.14896 > 999.999.99.999.1194: UDP, length 42
10:20:34.403310 IP (tos 0x0, ttl 59, id 50870, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.26996: UDP, length 42
10:20:34.445123 IP (tos 0x0, ttl 128, id 36703, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:34.449232 IP (tos 0x0, ttl 59, id 50872, offset 0, flags [DF], proto UDP (17), length 82)
999.999.99.999.1194 > 192.168.2.3.39398: UDP, length 54
10:20:35.210444 IP (tos 0x0, ttl 128, id 36704, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:35.976530 IP (tos 0x0, ttl 59, id 50885, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.39398: UDP, length 42
10:20:36.221145 IP (tos 0x0, ttl 128, id 36705, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:37.221840 IP (tos 0x0, ttl 128, id 36706, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:38.225845 IP (tos 0x0, ttl 128, id 36707, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:38.392475 IP (tos 0x0, ttl 59, id 51095, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.14896: UDP, length 42
10:20:39.229061 IP (tos 0x0, ttl 128, id 36708, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:39.818538 IP (tos 0x0, ttl 59, id 51167, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.39398: UDP, length 42
10:20:40.229172 IP (tos 0x0, ttl 128, id 36709, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:41.242479 IP (tos 0x0, ttl 128, id 36710, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:42.290121 IP (tos 0x0, ttl 128, id 36711, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:43.283952 IP (tos 0x0, ttl 128, id 36712, offset 0, flags [none], proto UDP (17), length 70)
192.168.2.3.39398 > 999.999.99.999.1194: UDP, length 42
10:20:45.146752 IP (tos 0x0, ttl 59, id 51213, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.18876: UDP, length 42
10:20:47.753792 IP (tos 0x0, ttl 59, id 51401, offset 0, flags [DF], proto UDP (17), length 70)
999.999.99.999.1194 > 192.168.2.3.39398: UDP, length 42

hugoeyng · Feb 21, 2022, 6:24 PM

@viragomann Hi
All port seems to be closed on pfSense, even they are not.

I use and "port checker" (on internet) and it shows that ports are closed but they are not.

I already disabled AV and Squid.