Error logs help - Community home

1

Ask

2

Reply

3

Solution

Hi been having a few spikes and sluggish connection issues with slow download speeds. I've checked the logs and wasn't sure what these errors was , I presumed it was someone trying to gain access externally. So we now have asked for a new IP but the errors still remain after this . Any ideas

failed to send packet: Network is unreachable

11:59:59

Category: firewall

[98830.512831] DROP wan in: IN=pppoe-wan OUT= MAC= src=79.110.62.70 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=63407 PROTO=TCP SPT=40685 DPT=14796 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000

11:59:01

Category: data

failed to send packet: Network is unreachable

11:58:58

Category: firewall

[98768.974585] DROP wan in: IN=pppoe-wan OUT= MAC= src=194.180.49.153 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=41958 PROTO=TCP SPT=40660 DPT=26906 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000

11:58:00

Category: firewall

[98711.692043] DROP wan in: IN=pppoe-wan OUT= MAC= src=165.154.206.204 DST=x.x.x.xLEN=69 TOS=0x00 PREC=0x00 TTL=48 ID=57457 DF PROTO=UDP SPT=38273 DPT=5006 LEN=49 MARK=0x8000000

11:57:06

Category: firewall

[98656.962295] DROP wan in: IN=pppoe-wan OUT= MAC= src=89.248.162.149 DST=x.x.x.xLEN=44 TOS=0x00 PREC=0x00 TTL=249 ID=35275 PROTO=TCP SPT=53121 DPT=4386 WINDOW=1025 RES=0x00 SYN URGP=0 MARK=0x8000000

11:56:42

Category: wan

Removing intercept reason: "wan_down"

3 REPLIES 3

No pointers in there. "DROP wan in" messages are just the firewall doing it's job.

Clearly your WAN is dropping occasionally. Have you tested with another LAN cable?

Yeah I have tested with another cable. New router is being posted out to see if that solves any issues .

Just wondered what all the random IP addresses was on the errors. so presume firewall is blocking external port scans?

These wasn't there before , now it's every minute non stop.

I presume this was causing issues with gaming etc in the house.

Yeah, the firewall is blocking some access attempts. Shouldn't affect anything on your WAN/LAN though. When I said your WAN was dropping occasionally I was referring to the "wan_down" message. It means the Internet had disconnected at some point.