M
M
Miki Osios2018-01-22 14:47:52
network hardware
Miki Osios, 2018-01-22 14:47:52

Mikrotik firewall - can't get rid of external connections?

Hi all! Do not judge strictly! I just wanted to get rid of incomprehensible connections
in src.Address, the connection is displayed (and many of them are internal ip addresses) that immediately burst into the Internet
, I definitely don’t have such addresses inside the network) there are no viruses! ppoe - ISP connection
5a65ccb38eed0648575798.jpeg
my firewall is a standard set of rules from the wiki
5a65cceac8337096511826.jpeg
Thank you all in advance!

Answer the question

In order to leave comments, you need to log in

3 answer(s)
D
Dmitry Shitskov, 2018-01-22
@Zarom

It looks like someone on your network is downloading torrents and these are incoming connections from peers.
https://habrahabr.ru/sandbox/65236/

D
Dmitry Skoromnov, 2018-01-24
@kursy-po-it

I recommend starting with the correct firewall settings. The first step is to set a rule allowing established & related traffic. Next, disable invalid. At the end, make a rule that prohibits everything if the firewall is normally closed. And between them to make a permit. And after that, see what and how.

I
itigul, 2018-01-22
@itigul

Judging by the port, this is very similar to a torrent client, perhaps transmission. The connection apparently comes to your external ip.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question