What Are You Doing Right Now
-
@scottalanmiller said:
You know it is really surprising just how fast and responsive ML is. Compared to similar communities, I can read and post several threads here while waiting for another community just to open a page.
Depends on the day. But Spiceworks loads a lot faster if I have Ad block plus installed if I don't it's slow as crap. Content filters and Intrusion prevention systems tend to mess with ML more though. Speaking of which I sure get a lot of stuff trying to come in (from the logs) on odd ports from an Nodebb forum looks to be a grove social community about gaming, odd. Since I don't visit it. They get blocked by my firewall though.
-
@thecreativeone91 said:
Content filters and Intrusion prevention systems tend to mess with ML more though.
Yes, NodeBB uses a more modern protocol and Socket.io so it is a handy way to see who has compliant networking gear and who has gear that is mangling the network connection. It was NodeBB's platform that had the earlier exposure of the Lenovo Shim - it was because their network driver mangled the HTTP calls from ML that we knew what to look for.
-
@thecreativeone91 said:
Speaking of which I sure get a lot of stuff trying to come in (from the logs) on odd ports from an Nodebb forum looks to be a grove social community about gaming, odd. Since I don't visit it. They get blocked by my firewall though.
Do you mean the gamrha.us community? What are you getting from there?
-
@scottalanmiller said:
@thecreativeone91 said:
Speaking of which I sure get a lot of stuff trying to come in (from the logs) on odd ports from an Nodebb forum looks to be a grove social community about gaming, odd. Since I don't visit it. They get blocked by my firewall though.
Do you mean the gamrha.us community? What are you getting from there?
Yep. I cleared my firewall logs but it was trying to connect to my WAN IP on port 8080 I think it was.
-
@thecreativeone91 said:
Yep. I cleared my firewall logs but it was trying to connect to my WAN IP on port 8080 I think it was.
What was trying to connect? It's just a website like this one. What is it doing?
-
@scottalanmiller said:
@thecreativeone91 said:
Yep. I cleared my firewall logs but it was trying to connect to my WAN IP on port 8080 I think it was.
What was trying to connect? It's just a website like this one. What is it doing?
Don't know. It's odd since I don't visit the site.
ulogd[13393]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60003" outitf="eth0" srcmac="00:1a:a0:55:d5:42" srcip="162.242.243.171" proto="6" length="40" tos="0x00" prec="0x00" ttl="64" srcport="80" dstport="55671" tcpflags="ACK FIN"
-
Where do you see port 8080?
-
What makes you think that it is Gamrha.us?
-
Could that be an aggressive firewall like Untangle that might just be messing with normal web traffic?
-
@scottalanmiller said:
What makes you think that it is Gamrha.us?
That's what the IP goes to without the vhosts domain name. Didn't check if anything else was hosted there.
-
@scottalanmiller said:
Could that be an aggressive firewall like Untangle that might just be messing with normal web traffic?
It's sophos but, it's in the "normal" firewall not the IPS or threat protection.
-
@thecreativeone91 said:
@scottalanmiller said:
What makes you think that it is Gamrha.us?
That's what the IP goes to without the vhosts domain name. Didn't check if anything else was hosted there.
Oh. Okay, it's not Gamrha.is, it's this forum attempting to talk to you
That's part of your ML traffic being dropped. -
@thecreativeone91 said:
@scottalanmiller said:
Could that be an aggressive firewall like Untangle that might just be messing with normal web traffic?
It's sophos but, it's in the "normal" firewall not the IPS or threat protection.
Have not had any reports of issues from Sophos users. Any idea what rules is doing that?
-
@scottalanmiller said:
Have not had any reports of issues from Sophos users. Any idea what rules is doing that?
No specific rule, it just doesn't match an inbound allow rule so it's denied. It looks like it's no properly negotiating the port with the client so it's coming in as a not established connection (meaning the client side didn't start the communication), so it gets Dropped.
-
What's with people assuming what issues are without checking into it or being willing to actually get real data on the situation. http://community.spiceworks.com/topic/953228-lan-speeds-on-your-network?page=2
-
Darn. Looks like an Update in Server 2012 R2 killed a Domain Controller..
-
@thecreativeone91 said:
What's with people assuming what issues are without checking into it or being willing to actually get real data on the situation. http://community.spiceworks.com/topic/953228-lan-speeds-on-your-network?page=2
Very common. If people only know LAN speed, for example, they see that as the problem every time. I see that one a ton. Having issues? Must be your port speed.
Really? When was LAN port speed anyone's issue? It can happen, but when does it happen?
-
@thecreativeone91 said:
@scottalanmiller said:
Have not had any reports of issues from Sophos users. Any idea what rules is doing that?
No specific rule, it just doesn't match an inbound allow rule so it's denied. It looks like it's no properly negotiating the port with the client so it's coming in as a not established connection (meaning the client side didn't start the communication), so it gets Dropped.
Would need some investigation. Looks like normal traffic. It's coming from an established port that you are using (80 on remote.) Would need to wireshark it to see if it is NodeBB doing something funky or if it is the Sophos.
-
Good morning.
Coffee time here -
Got FiOS connected for internet directly through my router at my parents' house. No more double-NATing for me!
