Strange traffic coming from my server

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
M3xi
Posts: 4
Joined: Wed Mar 20, 2013 9:55 am

Strange traffic coming from my server

Post by M3xi » Wed Mar 20, 2013 10:05 am

First of all thanks for this great piece of software.

When evaluating it, I found some traffic denied on my firewall that were surprising me. I run the server version on a linux and on a win7 and both seems to act the same way.
The traffic is mostly IP proto 52 and UDP/5004. Sometimes I also found http(s). This trafic is always trying to reach some server belonoging to the Japan Amazon IP range. My config is not using Dyndns, is not configure for Azure or as VPN gate. Logically it should not initiate any external connection.

Could someone explain this traffic?

Thanks in advance

cedar
Site Admin
Posts: 2070
Joined: Sat Mar 09, 2013 5:37 am

Re: Strange traffic coming from my server

Post by cedar » Wed Mar 20, 2013 9:46 pm

VPN server uses NAT traversal service to manage UDP hole punching at default setting.
If you don't want to use this feature, please edit config line 'DisableNatTraversal'.

M3xi
Posts: 4
Joined: Wed Mar 20, 2013 9:55 am

Re: Strange traffic coming from my server

Post by M3xi » Wed Mar 20, 2013 10:49 pm

Thanks for your quick reply. I will check this tomorrow and let the forum knows about the result.

M3xi
Posts: 4
Joined: Wed Mar 20, 2013 9:55 am

Re: Strange traffic coming from my server

Post by M3xi » Fri Mar 22, 2013 9:01 am

I did check this new setting and this outgoing traffic is still there. I am not sure but it seems that is it happenning only when I start or stop the server.

barrierfr
Posts: 11
Joined: Mon Apr 22, 2013 4:00 pm

Re: Strange traffic coming from my server

Post by barrierfr » Tue Apr 23, 2013 6:00 am

did you run wireshark ?
take a trace - enough to have this traffic -
Then analyze it using https://www.networktimeout.com/

Maybe you will find something.

Let us know !

joe42
Posts: 3
Joined: Wed May 08, 2013 8:24 am

Re: Strange traffic coming from my server

Post by joe42 » Wed May 08, 2013 8:28 am

I have had the exact strange behavior, but for me disabling NAT Traversal ('DisableNatTraversal') did work..
Thanks!

-Joe42

Post Reply