ACO

Reactions

0 Promote 0 Like 0 Boom 0 LOL 0 Spam 0 Abuse

Comments

  • The same catalog Bruce_Briggs already provided and it still doesn't contain either the "Connection timed out" error message or an explanation of the syntax used. I'm not trying to be a butt-head (although some would point out that it seems to be a natural talent of mine) but I find it odd that WatchGuard -- a company that…
    in Firebox allowing outbound to "private ip addresses" Comment by ACO July 2022
  • James: Thanks, but I seek a lot more than an explanation of this particular instance. I seek documentation explaining ALL the various nomenclature used in these "Connection timed out" error messages. For example, curly braces versus square braces ({} vs []); upper case versus lower case (B vs c); the exclamation mark, bang…
    in Firebox allowing outbound to "private ip addresses" Comment by ACO July 2022
  • That's not the message I'm looking for. It's the other one. I'm hunting specifically for the flags: [A] {B} | xxx.xxx.xxx.xxx:pppp -> yyy.yyy.yyy.yyy:pppp [!B c] {B}[P] It's always the message that has no msg_id that bogs one down.
    in Firebox allowing outbound to "private ip addresses" Comment by ACO July 2022
  • [sigh] Yet another cr@p app and entry level programmer loose on the world. I've never let applications like that get out the door "back in the day." Eyeballing logs and error reports is troublesome enough as it is. Having to repeatedly, mentally ignore entries just increases the probability of overlooking something…
    in Firebox allowing outbound to "private ip addresses" Comment by ACO July 2022
  • Filtering my syslogs a bit more, there are actually two sets of packets in a "session." The first is similar to the code in my post above and the second is a timeout. After a few pairs of these will be a consecutive stack of packets uninterrupted by timeouts building the message. http-proxy[1882]: msg_id="1AFF-0024" Allow…
    in Firebox allowing outbound to "private ip addresses" Comment by ACO July 2022
  • Bruce: I am positive it is being caused by an app on the TV. And yes, I agree wholeheartedly that the ISP should drop packets addressed to private addresses. However, reading through the individual "arg=" text doesn't give me a warm, fuzzy feeling. Here's one of the shorter "sessions" (9 log entries) with everything…
    in Firebox allowing outbound to "private ip addresses" Comment by ACO July 2022
  • ...and if the IP address is dynamically assigned using DHCP, be sure to reserve the IP address for the MAC of the device or you'll be chasing your tail for quite some time. If I understand packet filters versus proxies, it appears the checking is less stringent with packet filters. In this situation, resolution of the…
    in Is there a fix for err 20 & 21? Comment by ACO June 2022