Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 2296 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Heavy port 8080 traffic being blocked

Dlabun
Hello all,

I am seeing a heavy amount of traffic from port 8080 on my PC directly to my UTM that's being blocked by the firewall. If my limited knowledge is correct, this is my PC attempting to automatically configure the proxy settings. I am not using this UTM for web filtering or as a proxy. Is this behavior to be expected or is something on my UTM not configured properly? It's annoying as my firewall reports my PC as the biggest blocked traffic source

I am running SR 9.312-6 on a licensed SG105w and the PC is Windows 7.


This thread was automatically locked due to age.
  • 0
    I'd like to see a Firewall Log section that shows this traffic, its source, destination, etc.

    Could be a couple of things, but I'd like to look first please.

    ==

    When in doubt, Script it out.

  • 0
    Here's an entry from last night. It's just one entry of a line of about 30 that repeat every 3 seconds... 192.168.2.11 is the PC and 192.168.2.1 is the UTM.

    2015:06:01-18:06:44 remote ulogd[19772]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" srcmac="c8:60:00:XX:XX:XX" dstmac="00:1a:8c:XX:XX:XX" srcip="192.168.2.11" dstip="192.168.2.1" proto="6" length="52" tos="0x00" prec="0x00" ttl="128" srcport="50406" dstport="8080" tcpflags="SYN"
  • 0
    Check your Internet Options as it may be setup to use a proxy. Control Panel > Internet Options > Connections Tab > LAN settings.
Unfiltered HTML