Strange OUT_TCP logs
Jan 5 09:45:52 ninja kernel: ** OUT_TCP DROP ** IN= OUT=eth0 SRC=<site ip address> DST=<visitor ip address> LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=60016 DF PROTO=TCP SPT=80 DPT=1440 WINDOW=7504 RES=0x00 ACK FIN URGP=0
<visitor ip address> is the ip address of a visitor to my website. I can see from my stats program that these visitors accessed and browsed through the site as a normal user would. <site ip address> is the ip address of the site these users are visiting. This ip address is unique to the site they visited. It is not shared with any other sites on the server.
As you can see, it seems like certain visitors to my site (not all visitors) are having my server try to connect back to them and my firewall is blocking it.
What is this? Is this something I should be concerned about? I'm using apf firefall and directadmin, if that matters. Thanks for any help you can give.
