This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Heavy port 8080 traffic being blocked

Hello all,

I am seeing a heavy amount of traffic from port 8080 on my PC directly to my UTM that's being blocked by the firewall. If my limited knowledge is correct, this is my PC attempting to automatically configure the proxy settings. I am not using this UTM for web filtering or as a proxy. Is this behavior to be expected or is something on my UTM not configured properly? It's annoying as my firewall reports my PC as the biggest blocked traffic source

I am running SR 9.312-6 on a licensed SG105w and the PC is Windows 7.

This thread was automatically locked due to age.

Parents

0 Dlabun over 9 years ago

Here's an entry from last night. It's just one entry of a line of about 30 that repeat every 3 seconds... 192.168.2.11 is the PC and 192.168.2.1 is the UTM.

2015:06:01-18:06:44 remote ulogd[19772]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" srcmac="c8:60:00:XX:XX:XX" dstmac="00:1a:8c:XX:XX:XX" srcip="192.168.2.11" dstip="192.168.2.1" proto="6" length="52" tos="0x00" prec="0x00" ttl="128" srcport="50406" dstport="8080" tcpflags="SYN"
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Dlabun over 9 years ago

Here's an entry from last night. It's just one entry of a line of about 30 that repeat every 3 seconds... 192.168.2.11 is the PC and 192.168.2.1 is the UTM.

2015:06:01-18:06:44 remote ulogd[19772]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60001" initf="eth0" srcmac="c8:60:00:XX:XX:XX" dstmac="00:1a:8c:XX:XX:XX" srcip="192.168.2.11" dstip="192.168.2.1" proto="6" length="52" tos="0x00" prec="0x00" ttl="128" srcport="50406" dstport="8080" tcpflags="SYN"
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data