Search found 174 matches

Go to advanced search

by Alorotom
May 9th, 2017, 9:24 pm
Forum: Problemlösungen
Topic: ACCEPT, DROP, REJECT in FORWARDFW identisch geloggt? Fehler?
Replies: 0
Views: 45

ACCEPT, DROP, REJECT in FORWARDFW identisch geloggt? Fehler?

Hallo, in den letzten Wochen kamen verschiedentlich Fragen im Forum hoch, wieso im Firewall-Log FORWARDFW-Einträge auftauchen, obwohl die Pakete gemäß Regel eigentlich geblockt sein sollen. Stellvertretend mal dieser Thread . Darin wird auch auf einen Beitrag von Arne hingewiesen, der eigentlich and...
by Alorotom
May 9th, 2017, 9:11 pm
Forum: Installation
Topic: Folgen der Nutzung von .local TLD?
Replies: 2
Views: 170

Re: Folgen der Nutzung von .local TLD?

Hallo, zwischen .local und Namensauflösung für opnsense.org besteht wohl eher kein Zusammenhang. Die Ursache dürfte vielmehr in den allgemein zahlreichen Themen im Zusammenhang mit unbound begründet liegen. Den Beitrag von Michael habe ich jetzt nicht noch mal nachgelesen, aber dass .local unter all...
by Alorotom
May 6th, 2017, 7:33 am
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

I think it is the same issue as https://forum.ipfire.org/viewtopic.php?f=50&t=18208#p105861 where blocked outgoing traffic is logged as forwarded. Thanks for providing this link Edwin. Exact. I was looking for that post yesterday and could not find it. [..] I think, this time you are missing so...
by Alorotom
May 5th, 2017, 10:15 am
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

From what you have said, the way I have it setup is indeed blocking out bound traffic?? It is just the logs that are a bit confusing from the sounds of it Yes, that's what I've experienced. And thats worth to discuss in a new thread. I think, you should double-check your ruleset then. As I did, pla...
by Alorotom
May 5th, 2017, 7:29 am
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

So I tried something similar to your setup and here is something weird: I setup a firewall group and placed a NAS into it, confirmed that the NAS is not able to communicate to internet (no firmware update possible), I was not 100% convinced and placed also my desktop into this group: check, no inter...
by Alorotom
May 5th, 2017, 6:08 am
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

I can see the reject message 'reject-with icml-port-unreachable'.

Where?
by Alorotom
May 5th, 2017, 6:06 am
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

Hi, you are on a 10.0.x.x net with your green zone according to your initial post whereas your cams are in a 192.x.x.oct net. How does this fit? Apart from that everything looks like it does compared to the ruleset of my IPFire. I don't use groups but there is a device excluded explicit by a rule an...
by Alorotom
May 4th, 2017, 9:52 pm
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

What is the output from Menu Firewall / iptables > iptables: FORWARDFW > update?
You don't need to publish this here. Just take a look.
Since this group defines something based on IP Adresses, this should reflect in corresponding rules with the according IP Adresses in iptables.
by Alorotom
May 4th, 2017, 9:48 pm
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

Maybe problem with spelling: "Ip Cameras" vs. "IpCameras"?
by Alorotom
May 4th, 2017, 9:43 pm
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

Do the cams receive their IP by DHCP or did you configure a static IP configuration for each cam?
by Alorotom
May 4th, 2017, 9:13 pm
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

Can you show, how you defined the group "Ip Cameras"? The rule seems to be correct. The reason must be somewhere else if it does not match.
by Alorotom
May 4th, 2017, 8:35 pm
Forum: IPFire in General
Topic: Understanding the firewall logs.
Replies: 18
Views: 282

Re: Understanding the firewall logs.

Hi, 19:33:26 FORWARDFW green0 UDP 10.0.x.x 25970 c0:99:xx:xx:xx:xx 121.42.208.86 32100 I think here is missing something or/and has the wrong order. The firewall logs only what you want (configure) it to log. This quoted line means, communication from 10.0.x.x Port 25970 UDP to 121.42.208.86 Port 32...
by Alorotom
May 4th, 2017, 8:00 pm
Forum: Problemlösungen
Topic: Hohe CPU Last täglich ab 8:10
Replies: 13
Views: 290

Re: Hohe CPU Last täglich ab 8:10

Hallo Sit, also war das Problem nicht im Zusammenhang mit der IDS und kswapd0 gelöst. Wenn das Ereignis nun so reproduzierbar um 08:10 auftritt, könntest Du doch um diesen Zeitpunkt herum mal die Ausgabe von top im Auge behalten. So wäre doch zumindest erst mal der Task zu identifizieren, der die La...
by Alorotom
May 4th, 2017, 2:54 pm
Forum: Problemlösungen
Topic: Hohe CPU Last täglich ab 8:10
Replies: 13
Views: 290

Re: Hohe CPU Last täglich ab 8:10

Hallo iSit,
also ist es nicht "kswapd0"?
Alorotom
by Alorotom
May 2nd, 2017, 9:19 pm
Forum: IPFire in General
Topic: Traffic: In and out, who is making that download or upload???
Replies: 4
Views: 173

Re: Traffic: In and out, who is making that download or upload???

Hello Francis, no there is nothing like a real time monitor in the standard IPFire. But this has been discussed a few days before here in the forum. There seems to be an add on which could do the job. Or try iftop on the command line. E.g. "iftop -i green0" will show you very exactly what ...

Go to advanced search