Strange traffic in states table

  • What exactly does this mean?

    tcp <- "our external ip":80 <-

    (I replaced our actual IP with the words)

    We have been having problems with this user playing WOW and a few other things on the clock. He got caught recently and now my states table is full of hundreds of these. What is he up to? Does this mean they set up a tunnel through port 80 (that was a suggestion from someone else who saw this)?



  • Rebel Alliance Developer Netgate

    That is how a normal NAT entry looks.

    That means that someone on connected to your external port 80 and was redirected to

    That looks like you have NAT reflection enabled, and you have a port forward on port 80 to some other internal host.

  • Ok thanks.

Log in to reply