Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 2 subscribers
  • Views 26008 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Steam Issues

quicksilver4321
I created a service group with the steam ports.
Service Group

Created the FW Rule, and the rules are passing traffic.
FW Rule

I can log into steam just fine and play games.  But there are a lot of things I notice are not working.  
#1. I can not download the steam installer from the steam website.
#2. A lot of the steam URLs will not load, in the app or in any browser. (http://steamcommunity.com/actions/SearchFriends) for example.

I am seeing really strange behavior in my firewall log when trying to do these things.  Correct me if I am wrong, but my firewall seems to be blocking HTTP traffic trying to come back into my network. Any ideas on this?

FW Log (Blacked out my public address for safety reasons)


This thread was automatically locked due to age.
Parents
  • 0
    I can watch my firewall log and I get those RST and ACK RST almost instantly when trying to do anything in steam.

    The following pop up in my IPS log when trying to use steam as well.  Just need to figure out how to add a exception I guess.

    2013:07:15-21:29:53 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="APP-DETECT Steam game URI handler" group="500" srcip="63.228.223.103"
    dstip="192.168.1.20" proto="6" srcport="80" dstport="48373" sid="24397" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"

    2013:07:15-21:29:54 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="INDICATOR-OBFUSCATION Javascript indexOf rename attempt" group="320" srcip="68.142.122.70" dstip="192.168.1.20" proto="6" srcport="80" dstport="48374" sid="26616" class="Misc activity" priority="3" generator="1" msgid="0"

    2013:07:15-21:29:55 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="APP-DETECT Steam game URI handler" group="500" srcip="68.142.122.70" dstip="192.168.1.20" proto="6" srcport="80" dstport="48375" sid="24397" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"

    2013:07:15-21:30:49 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="APP-DETECT Steam game URI handler" group="500" srcip="63.228.223.103" dstip="192.168.1.20" proto="6" srcport="80" dstport="48406" sid="24397" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"

    2013:07:15-21:30:50 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="INDICATOR-OBFUSCATION Javascript indexOf rename attempt" group="320" srcip="68.142.122.70" dstip="192.168.1.20" proto="6" srcport="80" dstport="48413" sid="26616" class="Misc activity" priority="3" generator="1" msgid="0"

    2013:07:15-21:30:50 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="APP-DETECT Steam game URI handler" group="500" srcip="68.142.122.70" dstip="192.168.1.20" proto="6" srcport="80" dstport="48418" sid="24397" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"
Reply
  • 0
    I can watch my firewall log and I get those RST and ACK RST almost instantly when trying to do anything in steam.

    The following pop up in my IPS log when trying to use steam as well.  Just need to figure out how to add a exception I guess.

    2013:07:15-21:29:53 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="APP-DETECT Steam game URI handler" group="500" srcip="63.228.223.103"
    dstip="192.168.1.20" proto="6" srcport="80" dstport="48373" sid="24397" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"

    2013:07:15-21:29:54 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="INDICATOR-OBFUSCATION Javascript indexOf rename attempt" group="320" srcip="68.142.122.70" dstip="192.168.1.20" proto="6" srcport="80" dstport="48374" sid="26616" class="Misc activity" priority="3" generator="1" msgid="0"

    2013:07:15-21:29:55 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="APP-DETECT Steam game URI handler" group="500" srcip="68.142.122.70" dstip="192.168.1.20" proto="6" srcport="80" dstport="48375" sid="24397" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"

    2013:07:15-21:30:49 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="APP-DETECT Steam game URI handler" group="500" srcip="63.228.223.103" dstip="192.168.1.20" proto="6" srcport="80" dstport="48406" sid="24397" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"

    2013:07:15-21:30:50 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="INDICATOR-OBFUSCATION Javascript indexOf rename attempt" group="320" srcip="68.142.122.70" dstip="192.168.1.20" proto="6" srcport="80" dstport="48413" sid="26616" class="Misc activity" priority="3" generator="1" msgid="0"

    2013:07:15-21:30:50 cnhhome snort[4513]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="APP-DETECT Steam game URI handler" group="500" srcip="68.142.122.70" dstip="192.168.1.20" proto="6" srcport="80" dstport="48418" sid="24397" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"
Children
No Data
Unfiltered HTML