Page 1 of 1

Strange traffic coming from my server

Posted: Wed Mar 20, 2013 10:05 am
by M3xi
First of all thanks for this great piece of software.

When evaluating it, I found some traffic denied on my firewall that were surprising me. I run the server version on a linux and on a win7 and both seems to act the same way.
The traffic is mostly IP proto 52 and UDP/5004. Sometimes I also found http(s). This trafic is always trying to reach some server belonoging to the Japan Amazon IP range. My config is not using Dyndns, is not configure for Azure or as VPN gate. Logically it should not initiate any external connection.

Could someone explain this traffic?

Thanks in advance

Re: Strange traffic coming from my server

Posted: Wed Mar 20, 2013 9:46 pm
by cedar
VPN server uses NAT traversal service to manage UDP hole punching at default setting.
If you don't want to use this feature, please edit config line 'DisableNatTraversal'.

Re: Strange traffic coming from my server

Posted: Wed Mar 20, 2013 10:49 pm
by M3xi
Thanks for your quick reply. I will check this tomorrow and let the forum knows about the result.

Re: Strange traffic coming from my server

Posted: Fri Mar 22, 2013 9:01 am
by M3xi
I did check this new setting and this outgoing traffic is still there. I am not sure but it seems that is it happenning only when I start or stop the server.

Re: Strange traffic coming from my server

Posted: Tue Apr 23, 2013 6:00 am
by barrierfr
did you run wireshark ?
take a trace - enough to have this traffic -
Then analyze it using https://www.networktimeout.com/

Maybe you will find something.

Let us know !

Re: Strange traffic coming from my server

Posted: Wed May 08, 2013 8:28 am
by joe42
I have had the exact strange behavior, but for me disabling NAT Traversal ('DisableNatTraversal') did work..
Thanks!

-Joe42