[ previous ] [ next ] [ threads ]
 
 From:  "Ernie Zingleman" <ks4q at zingleman dot com>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  More on Telnet Problem
 Date:  Sun, 19 Dec 2004 16:26:43 -0500
Here are more detailed logs from m0n0wall.  Please disregard my earlier 
message on
this issue.  This email describes the trouble much more clearly.

It appears that a minor amount of Telnet -- Port 23 -- traffic from
the WAN is not making it through the Firewall to the host on the private
network.  Strangely, the firewall/Nat combination is passing most all 
traffic for port 23.

I'm running 1.b3 but I've also seen this behaviour with other beta and 
production versions of m0n0wall.

Is something wrong here?  Or is there something wrong with the traffic
from only certain IP addresses that it does not pass?

I can send the data from my status.php page if someone can help me 
troubleshoot it.

The below info is from the Firewall logs in m0n0wall.  I've turned on the 
'detailed' logging setting.


                  15:19:19.046923 ng0 @0:17 b 216.78.32.191,3025 -> 
192.168.1.32,23 PR tcp len 20 40 -AF IN

                  15:19:07.128761 ng0 @0:17 b 216.78.32.191,3025 -> 
192.168.1.32,23 PR tcp len 20 40 -AF IN

                  15:19:01.108475 ng0 @0:17 b 216.78.32.191,3025 -> 
192.168.1.32,23 PR tcp len 20 40 -AF IN

                  15:18:58.099202 ng0 @0:17 b 216.78.32.191,3025 -> 
192.168.1.32,23 PR tcp len 20 40 -AF IN


                        15:24:45.004924 ng0 @0:17 b 68.110.95.69,4109 -> 
192.168.1.32,23 PR tcp len 20 42 -AP IN

                        15:23:56.943632 ng0 @0:17 b 68.110.95.69,4109 -> 
192.168.1.32,23 PR tcp len 20 42 -AP IN

                        15:23:32.962259 ng0 @0:17 b 68.110.95.69,4109 -> 
192.168.1.32,23 PR tcp len 20 42 -AP IN

                        15:23:21.022291 ng0 @0:17 b 68.110.95.69,4109 -> 
192.168.1.32,23 PR tcp len 20 42 -AP IN

                        15:23:15.009790 ng0 @0:17 b 68.110.95.69,4109 -> 
192.168.1.32,23 PR tcp len 20 42 -AP IN

                        15:23:12.047411 ng0 @0:17 b 68.110.95.69,4109 -> 
192.168.1.32,23 PR tcp len 20 42 -AP IN

Thanks, Ernie