Question

33

Why I'm getting this [UFW BLOCK] in my syslogs?

rated 0 times [ 33] [ 0] / answers: 1 / hits: 99672 / 2 Years ago, thu, april 14, 2022, 9:43:22

I wonder why I get this error on my syslogs:

[7732763.396193] [UFW BLOCK] IN=eth0 OUT= MAC=02:8b:1a:75:d5:7b:02:8b:1a:40:00:03:08:00 SRC=x.x.x.x DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=64 ID=53703 DF PROTO=TCP SPT=35651 DPT=8443 WINDOW=457 RES=0x00 ACK RST URGP=0

I have just enabled the ufw. This error means that something going wrong?

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

egantfis

Add To Favorites

Follow

Total Points: 406

Total Questions: 108

Total Answers: 108

Location: Austria

Member since Thu, Jan 7, 2021

3 Years ago

egantfis questions

1 How to display photo thumbnails of .heic file in Xfce?

Mon, Nov 1, 21, 03:37, 3 Years ago

1 HP Officejet Pro 8720 with Ubuntu 20.04 can't scan from PC

Fri, Mar 18, 22, 23:26, 2 Years ago

1 MS teams sharescreen and blur background features

Mon, Mar 6, 23, 05:03, 1 Year ago

1 Screen tearing on youtube videos UBUNTU 20.4

Sun, Oct 3, 21, 23:30, 3 Years ago

1 After upgrade to 20.04, no sound from Firefox

Thu, Mar 10, 22, 12:28, 2 Years ago

View All

answered 2 Years ago olltea · Accepted Answer

Well, it means that ufw blocked a connection from SRC to DST on TCP Port 8443.
Unless you wanted this connection to be successful it is not a bad thing.

Port 8443 is mainly used by webservices, for example it is used by VMware ESXi, or some (HTTPS) Application Servers.

You can check if your box is running anything on that port by issueing sudo netstat -tulpen | grep 8443