Topic: Detects SYN_RCVD on port 443 from different IP addresses.

[Anders]

Hi!

For a few weeks, I have seen a change in traffic / activity in the SME Server 8.x
The server is standalone and stands behind a router.
Last update of the SME 8.x is made.

There are different IP addresses that take turns to join on port 443 and it is always SYN_RCVD when they are running.
I also see it on the LED light indicator on the switch, the ongoing activity.
I have now closed port 443 in the router.

I have no deep knowledge of networking but feel spontaneously that it is not good.

---
Netstat>
tcp        0      0 192.168.1.80:443            216.58.210.196:80           SYN_RECV    -
tcp        0      0 192.168.1.80:443            107.167.4.245:43973         SYN_RECV    -
tcp        0      0 192.168.1.80:443            50.7.178.115:22000          SYN_RECV    -
---

I wonder if anyone else has experienced a similar event?

Do you think I should send the information to them that allocates IP addresses?

Are there any changes I can make to the server that prevents this event?


I write this as a general question, because I do not know if it's a safety issue or if it's a bug.


Sincerely,
Anders

[Stefano]

nothing to worry about, IMO

[Anders]

Stefano,
thanks for your opinion.

/Anders

nothing to worry about, IMO