Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Confused about port forwarding

    Scheduled Pinned Locked Moved Firewalling
    23 Posts 3 Posters 923 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • 2
      23roadsdiverged @23roadsdiverged
      last edited by

      @23roadsdiverged said in Confused about port forwarding:

      @johnpoz
      Here is the packet sniff for the printer:
      11:34:49.095174 ARP, Request who-has 10.0.0.201 tell 10.0.0.87, length 46
      11:34:58.364292 IP 10.0.0.201.5353 > 224.0.0.251.5353: UDP, length 45
      11:35:00.033978 IP 10.0.0.201.5353 > 224.0.0.251.5353: UDP, length 45
      11:36:19.876493 ARP, Request who-has 10.0.0.201 tell 10.0.0.83, length 46
      11:37:10.958889 IP 10.0.0.201.138 > 10.0.0.255.138: UDP, length 215
      11:37:11.003874 ARP, Request who-has 10.0.0.201 tell 10.0.0.87, length 46
      11:38:11.019862 IP 10.0.0.201.138 > 10.0.0.255.138: UDP, length 215
      11:38:41.897896 IP 10.0.0.201.41839 > 8.8.8.8.53: UDP, length 36
      11:38:41.897990 IP 10.0.0.201.41839 > 8.8.8.8.53: UDP, length 36
      11:38:41.927469 ARP, Request who-has 10.0.0.201 tell 10.0.0.1, length 28
      11:38:41.927725 ARP, Reply 10.0.0.201 is-at 00:80:91:b8:42:d5, length 46
      11:38:41.927741 IP 8.8.8.8.53 > 10.0.0.201.41839: UDP, length 206
      11:38:41.947990 IP 8.8.8.8.53 > 10.0.0.201.41839: UDP, length 254
      11:38:42.002268 IP 10.0.0.201.37642 > 8.8.8.8.53: UDP, length 44
      11:38:42.032853 IP 8.8.8.8.53 > 10.0.0.201.37642: UDP, length 130
      11:38:42.060924 IP 10.0.0.201.47100 > 8.8.8.8.53: UDP, length 47
      11:38:42.150572 IP 8.8.8.8.53 > 10.0.0.201.47100: UDP, length 115
      11:38:42.151309 IP 10.0.0.201.37955 > 8.8.8.8.53: UDP, length 47
      11:38:42.239046 IP 8.8.8.8.53 > 10.0.0.201.37955: UDP, length 115
      11:38:42.239685 IP 10.0.0.201.38925 > 8.8.8.8.53: UDP, length 48
      11:38:42.340426 IP 8.8.8.8.53 > 10.0.0.201.38925: UDP, length 116
      11:38:42.342240 IP 10.0.0.201.43624 > 8.8.8.8.53: UDP, length 41
      11:38:42.342288 IP 10.0.0.201.43624 > 8.8.8.8.53: UDP, length 41
      11:38:42.428810 IP 8.8.8.8.53 > 10.0.0.201.43624: UDP, length 109
      11:38:42.436669 IP 8.8.8.8.53 > 10.0.0.201.43624: UDP, length 109
      11:38:43.607172 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:43.653268 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 0
      11:38:43.653674 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:43.691144 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 111
      11:38:43.691554 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:43.691796 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 18
      11:38:43.732928 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 206
      11:38:43.773247 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:43.817188 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 10
      11:38:43.850739 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 29
      11:38:43.851159 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:43.851611 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 169
      11:38:43.894592 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 1448
      11:38:43.894612 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 1448
      11:38:43.894629 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 1084
      11:38:43.895250 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:43.929558 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 170
      11:38:43.967681 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 51
      11:38:43.968876 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 47
      11:38:44.010279 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 245
      11:38:44.036481 IP 10.0.0.201.56031 > 8.8.8.8.53: UDP, length 44
      11:38:44.050500 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:44.074175 IP 8.8.8.8.53 > 10.0.0.201.56031: UDP, length 130
      11:38:44.075845 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 41
      11:38:44.115549 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 47
      11:38:44.116014 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:44.116295 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 59
      11:38:44.151756 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 0
      11:38:44.152189 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 47
      11:38:44.152632 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 47
      11:38:44.243954 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 0
      11:38:56.070231 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 192
      11:38:56.070872 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 35
      11:38:56.107991 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 77
      11:38:56.108724 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 0
      11:38:56.109364 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
      11:38:56.147361 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 0

      This packet capture is for when the printer is trying to send a scanned page out through the email.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @23roadsdiverged
        last edited by johnpoz

        @23roadsdiverged said in Confused about port forwarding:

        11:38:42.239685 IP 10.0.0.201.38925 > 8.8.8.8.53: UDP, length 48
        11:38:42.340426 IP 8.8.8.8.53 > 10.0.0.201.38925: UDP, length 116

        Well clearly the printer is talking to the internet and dns there is it sending to and getting an answer.

        11:38:43.607172 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
11:38:43.653268 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 0
11:38:43.653674 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
11:38:43.691144 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 111
11:38:43.691554 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
11:38:43.691796 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 18
11:38:43.732928 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 206
11:38:43.773247 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 0
11:38:43.817188 IP 10.0.0.201.50587 > 52.96.182.194.587: tcp 10
11:38:43.850739 IP 52.96.182.194.587 > 10.0.0.201.50587: tcp 29

        Here is it talking to what is an email server because the port is 587.. So whatever your problem isn't a firewall issue.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        2 1 Reply Last reply Reply Quote 0
        • 2
          23roadsdiverged @johnpoz
          last edited by

          @johnpoz OK, ty, yes. It turned out to be a password issue. Thank you for your help. Now I just need to figure out the fire panel.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.