INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!

Talk With Other Members
Be Notified Of Responses
To Your Posts
Keyword Search
One-Click Access To Your
Favorite Forums
Automated Signatures
On Your Posts
Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

LINK TO THIS FORUM!

Tek-Tips LinkedIn^® Group

Join our
LinkedIn^® Group!

Hook up with past and present colleagues and classmates quickly.

Partner With Us!

"Best Of Breed" Forums Add Stickiness To Your Site

(Download This Button Today!)

Feedback

"...Thanks for a great forum. My problem was answered just by scrolling through previously solved problems. Great service!!..."

More...

Geography

Where in the world do Tek-Tips members come from?

Click Here To Find Out!

Tek-Tips Shirts!

Get your
Tek-Tips Forums
SWAG here!

Home > Forums > MIS/IT > Security Solutions > SonicWALL solutions Forum

error log

Read More Threads Like This One

DTSMAN (TechnicalUser)

12 Jun 08 10:47

What does TCP connection dropped mean in the error logs, I have many of these lines.

06/11/2008 17:17:00.272 -     TCP connection dropped -     Source:80.77.85.190, 12346, WAN -     Destination:74.142.135.14, 5266, WAN -     Type: 526 -     Rule 0
06/11/2008 17:22:39.416 -     UDP packet dropped -     Source:4.2.2.2, 53, WAN -     Destination:74.142.135.14, 2161, WAN -      -
06/11/2008 17:37:07.672 -     TCP connection dropped -     Source:202.109.175.74, 6000, WAN -     Destination:74.142.135.14, 2967, WAN -     Type: 296 -     Rule 0
06/11/2008 17:37:12.576 -     NAT Discovery :  No NAT/NAPT device detected between IPSec Security gateways -     Source:209.12.57.18 -     Destination:74.142.135.14 -      -
06/11/2008 17:45:08.720 -     NAT Discovery :  No NAT/NAPT device detected between IPSec Security gateways -     Source:209.12.57.18 -     Destination:74.142.135.14 -      -
06/11/2008 17:47:10.496 -     TCP connection dropped -     Source:80.77.85.190, 12346, WAN -     Destination:74.142.135.14, 5266, WAN -     Type: 526 -     Rule 0
06/11/2008 18:02:10.176 -     TCP connection dropped -     Source:61.139.209.141, 37810, WAN -     Destination:74.142.135.14, 21, WAN -     'File Transfer (FTP)' -     Rule 0
06/11/2008 18:08:46.144 -     TCP connection dropped -     Source:193.194.159.26, 57815, WAN -     Destination:74.142.135.14, 22, WAN -     'SSH' -     Rule 0
06/11/2008 18:17:20.608 -     TCP connection dropped -     Source:80.77.85.190, 12346, WAN -     Destination:74.142.135.14, 5266, WAN -     Type: 526 -     Rule 0
06/11/2008 1

Bo

Remember,
If the women don't find you handsome,
they should at least find you handy.
(Red Green) www.redgreen.com

ajharn (IS/IT--Management)

24 Jul 08 19:24

Hey Bo,

It means that your Firewall is doing its job.

Some computer at the Source IP tried to connect to your computer, and the firewall blocked the connection.

E.G.  In the first line in your log...the computer at 80.77.85.190 tried to connect to your computer network at 74.142.135.14 and send data on port 5266.

The firewall dropped that connection because there is no Access Rule in your firewall that says ALLOW traffic on Port 5266.

Or...if such a rule exists, it is configured incorrectly.

Hope that helps.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Back To Forum

Back To SonicWALL solutions