Also I never had this issue with protonmail.ĭoes this happens only with proton mail? Is there anything in your firewall that could lead to this event? Are you using suricata? Location block? Spamhaus drop in firewall options?Īlternative hypothesis, could this happen because your modem is not in bridge mode (potentially a double NAT could explain this anomaly) ? Assuming that you have an ADSL, If you cannot setup your modem in bridge mode, you should put IPFire IP address in the DMZ zone of the modem and possibly also write a static rule sending all the traffic to the DMZ of the modem. This would explain the firewall receiving SYNACK packets that would trigger DROP_NEWNOTSYN and consequently the DROP_CTINVALID (connection absent in the conntrack table). This would suggest that the syn packets starts from behind the firewall but somehow they are not kept in account by the kernel. If the firewall was dropping these packets, a packet drop log entry would consistently appear, right?ĭo I understand correctly that curl from IPFire machine works and the problem happens only from behind the firewall? ![]() The weird thing is that tail -f /var/log/messages while attempting to curl -v yields no packet drop errors, making this very hard to debug, indeed. ![]() Don't have an account Create one for FREE. ![]() In this rebrand, the company is bringing together ProtonMail with its other services, Proton VPN. Did you figure out what the issue was? In my case, the only thing dropped that was to protonmail-connected IP addresses are some DROP_CTINVALID and DROP_NEWNOTSYN packets. Login to your Proton Account to access all encrypted Proton services such as Proton Mail, Drive, Calendar, and more. popular iOS Mail app, has rebranded itself as Proton.
0 Comments
Leave a Reply. |