Project

General

Profile

Actions
Copy link

Bug #12893

closed

Invalid source address of Unbound

Added by Samuel Hanna over 2 years ago. Updated over 2 years ago.

Status:
Not a Bug
Priority:
Normal
Assignee:
-
Category:
Unknown
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

I have noticed some bad traffic leaving with invalid source IP address, which i think it belongs to Unbound traffic.
I have 2 WAN interfaces, well configured and working since version 2.5.0, 3 or more days ago noticed that behavior in the firewall logs.

Files

Download all files
WAN_Interfaces_IPs.png (3.48 KB) WAN_Interfaces_IPs.png Samuel Hanna, 03/03/2022 11:56 AM
Invalid_Source_IP.png (4.04 KB) Invalid_Source_IP.png Samuel Hanna, 03/03/2022 11:56 AM
Actions
Copy link
 #1

Updated by Jim Pingle over 2 years ago

  • Status changed from New to Not a Bug
  • Target version deleted (2.7.0)

It's not a bug, that traffic is being blocked outbound. Unbound sent a RST+ACK packet after the state from a previous connection had been removed from pf.

https://docs.netgate.com/pfsense/en/latest/troubleshooting/log-filter-blocked.html

Actions
Copy link

Also available in: Atom PDF