[ previous ] [ next ] [ threads ]
 
 From:  Egbert Jan van den Bussche <egbert at vandenbussche dot nl>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Filter/NAT questions
 Date:  Fri, 11 Feb 2011 13:54:43 +0100
Hi,

I see some logs that I do not understand.

First: How can I read the "ng0 @0:15" part? ng0 is listed as IPv6 
gateway and in the IPv6 fe80:: assignments. I have a native IPv6 
connection from my provider (XS4ALL in NL). I would be able to find this 
0:15 thing in the .XML config file.

Second Why is this (IPv4) traffic blocked? I have a NAT rule and FW rule 
to allow this (VoIP) traffic to my VoIP gateway.

Log (\\ continued on same line)
Feb 11 13:17:02 green ipmon[125]: 13:17:02.655739 ng0 @0:15 b \\
82.101.62.99,5060 -> 83.163.218.172,46560 PR udp len 20 279 IN
Feb 11 13:17:59 green ipmon[125]: 13:17:59.102595 ng0 @0:15 b \\
82.101.62.99,5060 -> 83.163.218.172,46560 PR udp len 20 279 IN

82.101.62.99 is a server used by my ISP; 83.163.218.172 is my WAN 
address assinged with PPPoE by my provider. I think it is strange that 
the source uses 5060. I would expect that the destination was my IP and 
5060/udp...

Egbert Jan, NL