This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion
Default DROP on LDAP (TCP/389) despite TOP Firewall Rule

Morning All,

Having an issue with my LDAP server running over SSL VPN Tunnel (IPSec Broke... not sure why, tunnel says up, no traffic. So we dropped back to SSL Tunnel).
2022:02:02-00:01:59 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39694" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:00 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57933" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:00 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39695" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:02 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39695" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:02 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57934" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:03 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39694" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:03 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39695" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:06 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57937" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:07 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57937" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:07 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39695" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:09 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57937" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:09 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39697" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:10 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39697" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:10 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57939" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:12 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57939" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:12 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39697" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:13 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57937" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:13 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57939" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:15 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39699" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:16 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39699" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:16 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39697" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:18 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57939" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:18 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39699" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:19 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57941" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:20 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57941" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:22 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39701" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:22 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39699" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:22 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57941" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:23 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39701" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:25 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39701" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:25 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57943" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:26 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57943" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:26 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57941" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:27 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39703" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:27 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57943" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:28 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39703" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:28 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39701" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:30 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39703" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:32 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57945" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:32 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57943" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:33 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57945" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:34 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39703" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:34 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57945" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:34 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39705" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:36 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39705" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:36 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39706" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:37 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57948" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:37 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39706" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:37 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39705" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:38 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57948" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:38 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57945" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:40 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39706" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:40 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57948" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:42 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39705" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:44 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39706" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:44 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57948" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:45 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57949" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:46 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57949" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:46 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57950" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:48 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57950" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:48 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57949" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:48 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39710" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:49 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39710" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:49 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57950" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:51 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39710" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:51 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57949" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:54 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57950" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:54 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39711" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:55 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39711" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:55 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39710" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:57 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39711" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:58 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57953" dstport="389" tcpflags="SYN" 
2022:02:02-00:02:59 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57953" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:01 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39713" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:01 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39711" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:01 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57953" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:02 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39713" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:04 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39713" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:04 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57955" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:05 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57955" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:05 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39715" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:05 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57953" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:06 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39715" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:06 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57955" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:08 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39713" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:08 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39715" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:11 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57957" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:11 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57955" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:12 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57957" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:12 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39715" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:13 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39717" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:13 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57957" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:14 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39717" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:15 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57959" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:15 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39717" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:16 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57959" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:18 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39719" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:18 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57957" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:18 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57959" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:19 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39719" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:20 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39717" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:20 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39719" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:22 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57959" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:22 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57961" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:24 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57961" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:24 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39719" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:26 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57961" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:26 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39721" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:27 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39721" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:27 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57963" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:29 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57963" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:29 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39721" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:29 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39723" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:30 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57961" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:30 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39723" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:30 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57963" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:33 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39723" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:33 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39721" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:35 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57963" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:36 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57965" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:36 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39723" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:37 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57965" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:38 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39725" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:38 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57965" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:39 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39725" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:39 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57967" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:41 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57967" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:41 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39725" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:41 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39727" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:43 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39727" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:43 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57967" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:43 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57965" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:45 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39727" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:45 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39725" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:47 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57967" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:48 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57969" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:48 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39727" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:49 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57969" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:49 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39729" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:51 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39729" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:51 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57969" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:51 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57971" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:53 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57971" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:53 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39729" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:55 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57971" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:55 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57969" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:56 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39731" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:57 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39731" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:57 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39729" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:59 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57971" dstport="389" tcpflags="SYN" 
2022:02:02-00:03:59 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39731" dstport="389" tcpflags="SYN" 
2022:02:02-00:04:00 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57973" dstport="389" tcpflags="SYN" 
2022:02:02-00:04:01 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57973" dstport="389" tcpflags="SYN" 
2022:02:02-00:04:03 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39731" dstport="389" tcpflags="SYN" 
2022:02:02-00:04:03 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57973" dstport="389" tcpflags="SYN" 
2022:02:02-00:04:05 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39733" dstport="389" tcpflags="SYN" 
2022:02:02-00:04:06 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.221" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="39733" dstport="389" tcpflags="SYN" 
2022:02:02-00:04:06 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57975" dstport="389" tcpflags="SYN" 
2022:02:02-00:04:07 external-utm ulogd[4735]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="tun0" srcmac="63:ea:00:00:51:0b" srcip="10.20.30.1" dstip="10.16.3.222" proto="6" length="60" tos="0x00" prec="0x00" ttl="64" srcport="57975" dstport="389" tcpflags="SYN"
Live log, and FW logs filling every second... Same text "DEFAULT DROP" despite the source and destination being listed explicitly
ANY help at all would be much appreciated!
This thread was automatically locked due to age.
Top Replies

dirkkotte over 2 years ago +1

10.20.30.1 is a drvice within your LAN? Check host-definition of 10.20.30.1 and CA01PDC00x ... advanced settings too. There should not be any interface binding.
dirkkotte over 2 years ago

10.20.30.1 is a drvice within your LAN?

Check host-definition of 10.20.30.1 and CA01PDC00x

... advanced settings too. There should not be any interface binding.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up +1 Vote Down

Cancel
Ralph Maccy over 2 years ago

Thanks I *did* have the 'internal' interface applied to the definition.

That IP is assigned from the SSL VPN Pool range of IP's I'm not certain what system is getting assigned that IP from the tunnel.

I've attached screenshots below of the current setup.

Going to monitor for the next 15 minutes, see if swapping the interfaces over to << Any >> has solved it. Will report back shortly. Thank you!!
Cancel
Vote Up 0 Vote Down

Cancel
Ralph Maccy over 2 years ago

Thanks Dirk! - That fixed it, now everything is going through as normal.

I had the interface down as INTERNAL on the host definition, and also on the VPN IP Pool. I changed them over to << Any >> as suggested and that fixed it.
Cancel
Vote Up +1 Vote Down

Cancel