Firewall log TCP -S

[Antibiotic]

Please, someone explain is it normally or not. I have read about this , but still in doubt, This is normally or something wrong with a rule or traffic passing. This is log entry regarding rule to pass VPN traffic over poxy port VPN provider. Vpn use UDP protocol, btw!

[stephenw10]

I'm not sure what you're asking here.

Given that floating, quick, outbound rule, traffic to the remote proxy that leaves the VPN will open a state like that, yes.

What exactly is that rule supposed to be doing?

Steve

[Antibiotic]

@stephenw10
I have a rule to block RFC 1918 from WAN and without this rule above block RFC do not have internet access.

and firewall log show protocol TPC-S from any 10.0.0.0/8 to 10.8.0.1. The question , is it suppose to be normally in this case?

[stephenw10]

Yes, that's what I'd expect to see given that rule.

[johnpoz]

@Antibiotic curious what you feel are highrisk ports?

[Antibiotic]

@johnpoz

[johnpoz]

@Antibiotic curious let see if you get any hits on those ;)

[Antibiotic]

@johnpoz Just for a hobby)))

[Antibiotic]

@johnpoz BTW , I left a block rule for private network only on WAN and this TPC-S disappear from my log)))

[stephenw10]

@johnpoz said in Firewall log TCP -S:

curious let see if you get any hits on those ;)

Probably depends on what types of clients are behind the firewall. I'd certainly expect some hits on some of those.