I have a firewall between the LAN port on the Rv220W and my LAN, call that redundancy an insurance policy for the paranoid. Every time I log in to the administrative interface on the RV220W my internal firewall tracks a large number of invalid packets (listed below). The source port is 443, so it looks like it is coming from the remote admin web server. Does anyone know why this is happening and what I can do to make it stop? Is there a way to pass this information along to the engineers so that they can have a look at it?
- eth0 is the 'outside' interface on my internal firewall, and it has an IP number of 192.168.0.2. My firewall is the gateway to the rest of the LAN.
- 192.168.0.1 is the LAN IP on the RV220W
Here are some examples:
Aug 29 15:03:22 fawkes kernel: [280653.858167] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56377 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.858203] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56377 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.859671] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56378 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.859710] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56378 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.908156] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56379 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.908194] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56379 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.909904] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56380 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.909943] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56380 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.974635] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56381 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.974674] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56381 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.998626] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56382 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280653.998664] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56382 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280654.000376] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56383 WINDOW=0 RES=0x00 RST URGP=0
Aug 29 15:03:22 fawkes kernel: [280654.000416] Invalid packet:IN=eth0 OUT= MAC=00:1b:21:a3:c6:7d:e0:5f:b9:0c:c9:82:08:00 SRC=192.168.0.1 DST=192.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=443 DPT=56383 WINDOW=0 RES=0x00 RST URGP=0
