Lots of random connections

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
osandercock
Posts: 1
Joined: Fri Mar 13, 2020 2:10 pm

Lots of random connections

Post by osandercock » Thu May 14, 2020 11:48 am

Hi,

I'm getting issues with my SE server. Looking through the Server_log_vpn and i can see loads of these entries:

2020-05-14 12:32:22.975 On the TCP Listener (Port 5555), a Client (IP address 172.16.0.1, Host name "172.16.0.1", Port number 53524) has connected.
2020-05-14 12:32:22.975 For the client (IP address: 172.16.0.1, host name: "172.16.0.1", port number: 53524), connection "CID-1309" has been created.
2020-05-14 12:32:23.022 SSL communication for connection "CID-1309" has been started. The encryption algorithm name is "TLS_AES_256_GCM_SHA384".
2020-05-14 12:32:23.068 Connection "CID-1309" has been terminated.

I only have 30 users, i can see when they connect as they show as their own CID.

172.16.0.1 is my firewall/gateway.

Any ideas?

Thanks

drkrool
Posts: 47
Joined: Mon May 25, 2020 4:38 am
Location: Quebec, Canada

Re: Lots of random connections

Post by drkrool » Thu May 28, 2020 11:26 am

Maybe it's the "keep alive" feature as it seem to be very brief. I don't know for sure, just throwing this idea

ziddey
Posts: 13
Joined: Sat May 09, 2020 6:42 pm

Re: Lots of random connections

Post by ziddey » Thu May 28, 2020 9:22 pm

drkrool wrote:
Thu May 28, 2020 11:26 am
Maybe it's the "keep alive" feature as it seem to be very brief. I don't know for sure, just throwing this idea
nah, keepalive is outbound to port 80 by default.

not sure of your gateway setup, but generally, you'd end up seeing the gateway's internal ip for NAT loopback, ie you have a device in your LAN attempting to connect to softether via the WAN IP (and of course have appropriate port forwarding).

if it's coming from the internet, you'd see the actual source ip and not your gateway's.

you can watch the network (tcpdump/wireshark) to find the source

Post Reply