topic Re: Drop all packets in General Topics

Drop all packets

jdprovine — Fri, 31 Jul 2015 13:32:12 GMT

I added an exception to a spyware profile to drop all packets and it now says its dropping and allowing the packets how can that be?

Re: Drop all packets

gwesson — Fri, 31 Jul 2015 17:27:13 GMT

The security rule is set to allow, which lets the security profile on that rule get processed. So the traffic is allowed insofar as to let the spyware profile make a decision. Note that only a single packet was recorded in the traffic log referenced.

Cheers,

Greg Wesson

Re: Drop all packets

jdprovine — Fri, 31 Jul 2015 17:48:30 GMT

Actually what I found was that there was another rule (below the first one) that it went too after this that had no security profile assigned and was allowed there. Once I applied the security profile to the rule that was allowing it through, the spyware conficker packets were dropped.

Re: Drop all packets

pankaku — Sun, 02 Aug 2015 02:16:07 GMT

Could you share the two security rules? Just a screenshot is enough

Re: Drop all packets

jdprovine — Mon, 03 Aug 2015 14:42:48 GMT

Re: Drop all packets

pankaku — Mon, 03 Aug 2015 17:14:52 GMT

Is the whole file reached to the destination? Firewall allows some byte to determine the kind of traffic is going through the firewall and there after starts drooping them.

Re: Drop all packets

jdprovine — Mon, 03 Aug 2015 17:17:06 GMT

How would I know if the whole file reached the destination? A deny allows nothing as far as I can tell

Re: Drop all packets

pankaku — Mon, 03 Aug 2015 21:05:59 GMT

How you are saying that firewall is allow is allowing traffic?

Re: Drop all packets

prb — Thu, 20 Aug 2015 12:06:02 GMT

Hi @jdprovine,

I might be overlooking something.

But from what I see, the rule in th original log screenshot is different from the 2 screenshots below.

And so are the zones between the screenshots.

Did you manage to find out the issue and resolve it?

Thank You.

Re: Drop all packets

jdprovine — Mon, 24 Aug 2015 19:39:13 GMT

I found out it was dropping the packets and it is working