APF dropping packets

I am watching /var/log/messages and I see that my APF is dropping lots of outbound TCP packets:

Oct 31 11:40:57 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=200.162.5.98 LEN=180 TOS=0x00 PREC=0x00 TTL=64 ID=26488 DF PROTO=UDP SPT=53 DPT=2636 LEN=160

Oct 31 11:40:58 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=200.199.201.23 LEN=174 TOS=0x00 PREC=0x00 TTL=64 ID=26489 DF PROTO=UDP SPT=53 DPT=32885 LEN=154

Oct 31 11:41:02 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=209.73.168.11 LEN=142 TOS=0x00 PREC=0x00 TTL=64 ID=26490 DF PROTO=UDP SPT=53 DPT=33701 LEN=122

Oct 31 11:41:05 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=200.153.116.13 LEN=176 TOS=0x00 PREC=0x00 TTL=64 ID=26491 DF PROTO=UDP SPT=53 DPT=32768 LEN=156

Oct 31 11:41:06 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=165.98.135.164 LEN=117 TOS=0x00 PREC=0x00 TTL=64 ID=26492 DF PROTO=UDP SPT=53 DPT=1024 LEN=97

Oct 31 11:41:07 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=207.218.192.76 LEN=117 TOS=0x00 PREC=0x00 TTL=64 ID=25042 DF PROTO=UDP SPT=53 DPT=58700 LEN=97

Oct 31 11:41:09 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=200.221.11.114 LEN=121 TOS=0x00 PREC=0x00 TTL=64 ID=25043 DF PROTO=UDP SPT=53 DPT=32768 LEN=101

Oct 31 11:41:10 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=66.197.166.13 LEN=153 TOS=0x00 PREC=0x00 TTL=64 ID=25044 DF PROTO=UDP SPT=53 DPT=37089 LEN=133

Oct 31 11:41:11 gui kernel: ** OUT_UDP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=146.188.104.173 LEN=117 TOS=0x00 PREC=0x00 TTL=64 ID=25045 DF PROTO=UDP SPT=53 DPT=54704 LEN=97

Oct 31 11:41:12 gui kernel: ** OUT_TCP DROP ** IN= OUT=eth0 SRC=67.15.XX.XX DST=200.162.218.194 LEN=1442 TOS=0x00 PREC=0x00 TTL=64 ID=47419 DF PROTO=TCP SPT=2095 DPT=25012 WINDOW=13936 RES=0x00 ACK PSH URGP=0

I have checked /tmp and other directories that are 777, also ran rkhunter and everything is fine.

What can do ? Anything can be done ?

Thanks.

 

 

 

 

Top