Hello -
I just recently installed a Tor Relay and now I'm seeing a TON of port 8118 denied requests in my log.
Mar 21 17:24:51 kendra kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT=
MAC=c8:0a:a9:9e:2f:02:00:90:1a:a2:a0:7e:08:00 SRC=162.211.126.188
DST=72.90.68.179 LEN=48 TOS=0x00 PREC=0x00 TTL=122 ID=16300 DF
PROTO=TCP SPT=4853 DPT=8118 WINDOW=65535 RES=0x00 SYN URGP=0 Mar 21
17:24:53 kendra kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT=
MAC=c8:0a:a9:9e:2f:02:00:90:1a:a2:a0:7e:08:00 SRC=162.211.126.227
DST=72.90.68.179 LEN=48 TOS=0x00 PREC=0x00 TTL=122 ID=19011 DF
PROTO=TCP SPT=1146 DPT=8118 WINDOW=65535 RES=0x00 SYN URGP=0 Mar 21
17:24:55 kendra kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT=
MAC=c8:0a:a9:9e:2f:02:00:90:1a:a2:a0:7e:08:00 SRC=162.211.126.173
DST=72.90.68.179 LEN=48 TOS=0x00 PREC=0x00 TTL=122 ID=28405 DF
PROTO=TCP SPT=3137 DPT=8118 WINDOW=65535 RES=0x00 SYN URGP=0 Mar 21
17:24:57 kendra kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT=
MAC=c8:0a:a9:9e:2f:02:00:90:1a:a2:a0:7e:08:00 SRC=216.245.222.105
DST=72.90.68.179 LEN=52 TOS=0x00 PREC=0x00 TTL=56 ID=24995 DF
PROTO=TCP SPT=2998 DPT=8118 WINDOW=65535 RES=0x00 SYN URGP=0 Mar 21
17:24:59 kendra kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT=
MAC=c8:0a:a9:9e:2f:02:00:90:1a:a2:a0:7e:08:00 SRC=162.211.126.180
DST=72.90.68.179 LEN=48 TOS=0x00 PREC=0x00 TTL=122 ID=21683 DF
PROTO=TCP SPT=3372 DPT=8118 WINDOW=65535 RES=0x00 SYN URGP=0 Mar 21
17:25:01 kendra kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT=
MAC=c8:0a:a9:9e:2f:02:00:90:1a:a2:a0:7e:08:00 SRC=173.234.116.173
DST=72.90.68.179 LEN=48 TOS=0x00 PREC=0x00 TTL=247 ID=9188 PROTO=TCP
SPT=1976 DPT=8118 WINDOW=65535 RES=0x00 SYN URGP=0
I'm not configured at 8118.
My config:
SocksPort 72.90.68.179:9050 # Bind to this adddress:port too.
SocksPolicy accept 72.90.68.176/29
ControlPort 9051
ORPort 9001
DirPort 9030 # what port to advertise for directory connections
On my firewall, I'm allowing: TCP_IN: 9030,9001,9050,9051 and TCP_OUT: 9030,9001,9050,9051
Am I doing something wrong?
Why am I getting all this 8118 traffic?
Any help would be greatly appreciated.
Dennis