Security Testing: Issues with Traffic Forwarding and Firewall Rules

[hvacguy (Shaun HVAC)]

@ulissess

I encounter messages indicating “DROP_CTINVALID.”

You may find this informative.

DROP_CT_INVALID message since upgrading

Hi! Since upgrading to core 167 today, I’m seeing many DROP_CTINVALID messages on firewall log: [grafik] Raw format: 11:47:15 IN=red0 OUT= MAC=00:0d:b9:47:66:e9:74:42:7f:4a:e0:27:08:00 SRC=81.3.27.54 DST=172.17.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=TCP SPT=853 DPT=47344 WINDOW=0 RES=0x00 RST URGP=0 MARK=0x4000ca66 11:47:12 IN=red0 OUT= MAC=00:0d:b9:47:66:e9:74:42:7f:4a:e0:27:08:00 SRC=81.3.27.54 DST=172.17.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=TCP SPT=853 DPT=4734…