OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • android adb rules firing inconsistently
« previous next »
  • Print
Pages: [1]

Author Topic: android adb rules firing inconsistently  (Read 1892 times)

wfx3

  • Newbie
  • *
  • Posts: 31
  • Karma: 0
    • View Profile
android adb rules firing inconsistently
« on: November 19, 2018, 12:29:53 am »
my first time working with android adb and i can't figure out why the LAN firewall rule to port 5555 is firing inconsistently.  the 2.220 host (tinkerboard) is behind a gateway (ddwrt).  any ideas why the second and third packets below would skip the rule entirely?

Code: [Select]
$ ifconfig | grep inet
inet 192.168.1.232 netmask 0xffffff00 broadcast 192.168.1.255
$ adb connect 192.168.2.220         
failed to connect to 192.168.2.220:5555
$ ping 192.168.2.220
PING 192.168.2.220 (192.168.2.220): 56 data bytes
64 bytes from 192.168.2.220: icmp_seq=0 ttl=63 time=10.513 ms
64 bytes from 192.168.2.220: icmp_seq=1 ttl=63 time=8.080 ms

__timestamp__11/18/18 17:55:5411/18/18 17:55:5411/18/18 17:55:53
ack190817746190817746
action[pass][block][block]
anchorname
datalen000
dir[in][in][in]
dst192.168.2.220192.168.2.220192.168.2.220
dstport555555555555
ecn
id005636
interfaceigb2igb2igb2
ipflagsDFDFnone
labelUSER_RULE: allow LAN to tinkerboardUSER_RULE: default block IPv4 LANUSER_RULE: default block IPv4 LAN
length644040
offset000
proto666
protonametcptcptcp
reasonmatchmatchmatch
ridentifier000
rulenr122124124
seq39013041843330648330
src192.168.1.232192.168.1.232192.168.1.232
srcport499654991049910
subrulenr
tcpflagsSRAA
tcpopts
tos0x00x00x0
ttl646464
urp6553520582058
version444
« Last Edit: November 19, 2018, 12:32:43 am by wfx3 »
Logged

wfx3

  • Newbie
  • *
  • Posts: 31
  • Karma: 0
    • View Profile
Re: android adb rules firing inconsistently
« Reply #1 on: November 19, 2018, 04:06:48 pm »
i am thinking this is an asymmetric routing issue, because the gateway (ddwrt) is on the internal LAN interface. 

there is this article https://www.netgate.com/docs/pfsense/firewall/troubleshooting-blocked-log-entries-due-to-asymmetric-routing.html under "gateway set when it should not be set" which talks about the ill effects of pfsense. 

i am not sure how the adb protocol works though.  the DF flag in some of the blocked packets makes me think there is some fragmentation/MTU issue. 
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • android adb rules firing inconsistently
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2