Hallo zusammen,
weis jemand warum die N510 IP Pro immer beim Login per HTTP nach einer externen IP verbindet?
Feb 24 21:34:35 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:34:35" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.91.48 src_port=60929 dst_port=80 session_id=0 reason=Traffic Denied
Feb 24 21:34:37 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:34:37" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.91.48 src_port=60929 dst_port=80 session_id=0 reason=Traffic Denied
Feb 24 21:34:41 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:34:41" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.91.48 src_port=60929 dst_port=80 session_id=0 reason=Traffic Denied
Feb 24 21:35:16 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:35:15" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.243.133 src_port=60930 dst_port=80 session_id=0 reason=Traffic Denied
Feb 24 21:35:20 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:35:19" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.243.133 src_port=60930 dst_port=80 session_id=0 reason=Traffic Denied
148.251.243.133
148.251.91.48
Laut RIP gehört die range "Hetzner in Gunzenhausen"
NetRange: 148.251.0.0 - 148.253.255.255
CIDR: 148.251.0.0/16, 148.252.0.0/15
NetName: RIPE-ERX-148-251-0-0
und die Subrang der Gigaset GmbH in München:
inetnum: 148.251.243.128 - 148.251.243.159
netname: GIGASET-COMMUNICATIONS-GMBH
descr: Gigaset Communications GmbH
person: Hans-Juergen Huber
address: Gigaset Communications GmbH
address: Hofmannstra�e 61
address: 81379 M�nchen
address: GERMANY
phone: +4989444456905
Weis jemand was damit bezweckt werden soll? (habe mir den Traffic noch nicht angeschaut) - vielleicht spare ich mir ja ein bisserl suchen...
Grüsse & Danke
Stephan
weis jemand warum die N510 IP Pro immer beim Login per HTTP nach einer externen IP verbindet?
Feb 24 21:34:35 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:34:35" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.91.48 src_port=60929 dst_port=80 session_id=0 reason=Traffic Denied
Feb 24 21:34:37 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:34:37" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.91.48 src_port=60929 dst_port=80 session_id=0 reason=Traffic Denied
Feb 24 21:34:41 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:34:41" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.91.48 src_port=60929 dst_port=80 session_id=0 reason=Traffic Denied
Feb 24 21:35:16 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:35:15" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.243.133 src_port=60930 dst_port=80 session_id=0 reason=Traffic Denied
Feb 24 21:35:20 192.168.241.3 svg-ssg5: NetScreen device_id=svg-ssg5 [Root]system-notification-00257(traffic): start_time="2020-02-24 21:35:19" duration=0 policy_id=1 service=http proto=6 src zone=Trust dst zone=Untrust action=Deny sent=0 rcvd=24 src=192.168.241.23 dst=148.251.243.133 src_port=60930 dst_port=80 session_id=0 reason=Traffic Denied
148.251.243.133
148.251.91.48
Laut RIP gehört die range "Hetzner in Gunzenhausen"
NetRange: 148.251.0.0 - 148.253.255.255
CIDR: 148.251.0.0/16, 148.252.0.0/15
NetName: RIPE-ERX-148-251-0-0
und die Subrang der Gigaset GmbH in München:
inetnum: 148.251.243.128 - 148.251.243.159
netname: GIGASET-COMMUNICATIONS-GMBH
descr: Gigaset Communications GmbH
person: Hans-Juergen Huber
address: Gigaset Communications GmbH
address: Hofmannstra�e 61
address: 81379 M�nchen
address: GERMANY
phone: +4989444456905
Weis jemand was damit bezweckt werden soll? (habe mir den Traffic noch nicht angeschaut) - vielleicht spare ich mir ja ein bisserl suchen...
Grüsse & Danke
Stephan