thr3ads.net - samba - [Samba] Samba and UFW [Jan 2019]

If this information is useful, please help other people find it:
Share via:

mmcg29440 at frontier.com

2019-Jan-29 15:39 UTC

[Samba] Samba and UFW

Here is the ufw.log after enabling logging medium and trying to connect to
the windows net. Unfortunately the web Microsoft page is in German. I think
it says window uses smb1 syntax.

 

Jan 27 15:11:09 martin-RB042AV-ABA-a1410y kernel: [  887.241685] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=10646 PROTO=UDP SPT=137 DPT=52944 LEN=70 

Jan 27 15:11:21 martin-RB042AV-ABA-a1410y kernel: [  899.315443] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=10652 PROTO=UDP SPT=137 DPT=58971 LEN=70 

Jan 27 15:11:22 martin-RB042AV-ABA-a1410y kernel: [  900.317937] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=10653 PROTO=UDP SPT=137 DPT=50482 LEN=70 

Jan 28 10:05:57 martin-RB042AV-ABA-a1410y kernel: [   39.099157] [UFW BLOCK]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=1
FLOWLBL=849527 PROTO=UDP SPT=8612 DPT=8612 LEN=24 

Jan 28 10:05:57 martin-RB042AV-ABA-a1410y kernel: [   39.099223] [UFW BLOCK]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=1
FLOWLBL=871986 PROTO=UDP SPT=8612 DPT=8610 LEN=24 

Jan 28 10:05:57 martin-RB042AV-ABA-a1410y kernel: [   39.109547] [UFW BLOCK]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=1
FLOWLBL=849527 PROTO=UDP SPT=8612 DPT=8612 LEN=24 

Jan 28 10:05:57 martin-RB042AV-ABA-a1410y kernel: [   39.109600] [UFW BLOCK]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=1
FLOWLBL=871986 PROTO=UDP SPT=8612 DPT=8610 LEN=24 

Jan 28 10:24:44 martin-RB042AV-ABA-a1410y kernel: [ 1166.954068] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18139 DF PROTO=TCP SPT=445 DPT=54928 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:24:46 martin-RB042AV-ABA-a1410y kernel: [ 1168.989657] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=726 DF PROTO=TCP SPT=445 DPT=54928 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:24:46 martin-RB042AV-ABA-a1410y kernel: [ 1169.058953] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=1306 DF PROTO=TCP SPT=139 DPT=60678 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:24:48 martin-RB042AV-ABA-a1410y kernel: [ 1170.980346] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=16297 DF PROTO=TCP SPT=445 DPT=54928 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:24:48 martin-RB042AV-ABA-a1410y kernel: [ 1171.057954] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=16949 DF PROTO=TCP SPT=139 DPT=60678 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:24:50 martin-RB042AV-ABA-a1410y kernel: [ 1172.994162] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=32476 DF PROTO=TCP SPT=445 DPT=54928 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:24:50 martin-RB042AV-ABA-a1410y kernel: [ 1173.049599] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=171 DF PROTO=TCP SPT=139 DPT=60678 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:24:51 martin-RB042AV-ABA-a1410y kernel: [ 1173.229815] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=1682 DF PROTO=TCP SPT=139 DPT=60680 WINDOW=256 RES=0x00 ACK URGP=0 

Jan 28 10:24:52 martin-RB042AV-ABA-a1410y kernel: [ 1174.997181] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=16074 DF PROTO=TCP SPT=445 DPT=54928 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:24:52 martin-RB042AV-ABA-a1410y kernel: [ 1175.058150] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=16583 DF PROTO=TCP SPT=139 DPT=60678 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:25:04 martin-RB042AV-ABA-a1410y kernel: [ 1187.017370] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=8431 DF PROTO=TCP SPT=139 DPT=60678 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 10:25:24 martin-RB042AV-ABA-a1410y kernel: [ 1206.972291] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=3852 DF PROTO=TCP SPT=139 DPT=60682 WINDOW=254 RES=0x00 ACK URGP=0 

Jan 28 13:20:46 martin-RB042AV-ABA-a1410y kernel: [  329.719785] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=17786 PROTO=UDP SPT=137 DPT=46375 LEN=70 

Jan 28 13:20:47 martin-RB042AV-ABA-a1410y kernel: [  331.096971] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=17794 PROTO=UDP SPT=137 DPT=56119 LEN=70 

Jan 28 13:20:48 martin-RB042AV-ABA-a1410y kernel: [  332.146862] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=17802 PROTO=UDP SPT=137 DPT=49248 LEN=70 

Jan 28 13:29:02 martin-RB042AV-ABA-a1410y kernel: [  245.106594] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=17901 PROTO=UDP SPT=137 DPT=51506 LEN=70 

Jan 28 13:29:05 martin-RB042AV-ABA-a1410y kernel: [  248.113033] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17910 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:29:07 martin-RB042AV-ABA-a1410y kernel: [  250.113431] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17911 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:29:09 martin-RB042AV-ABA-a1410y kernel: [  252.113590] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17912 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:29:11 martin-RB042AV-ABA-a1410y kernel: [  254.113722] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17913 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:29:13 martin-RB042AV-ABA-a1410y kernel: [  256.127571] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17914 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:29:15 martin-RB042AV-ABA-a1410y kernel: [  258.127779] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17915 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:29:17 martin-RB042AV-ABA-a1410y kernel: [  260.127908] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17916 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:29:19 martin-RB042AV-ABA-a1410y kernel: [  262.128069] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17917 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:29:21 martin-RB042AV-ABA-a1410y kernel: [  263.610009] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=17918 PROTO=UDP SPT=137 DPT=51327 LEN=70 

Jan 28 13:29:23 martin-RB042AV-ABA-a1410y kernel: [  266.128456] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=17927 DF PROTO=TCP SPT=139 DPT=50944 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:17 martin-RB042AV-ABA-a1410y kernel: [  799.730137] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13272 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:19 martin-RB042AV-ABA-a1410y kernel: [  801.745350] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13273 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:21 martin-RB042AV-ABA-a1410y kernel: [  803.745840] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13274 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:23 martin-RB042AV-ABA-a1410y kernel: [  805.746230] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13276 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:25 martin-RB042AV-ABA-a1410y kernel: [  807.746806] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13277 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:27 martin-RB042AV-ABA-a1410y kernel: [  809.746886] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13278 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:29 martin-RB042AV-ABA-a1410y kernel: [  811.747448] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13279 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:31 martin-RB042AV-ABA-a1410y kernel: [  813.763607] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13281 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:33 martin-RB042AV-ABA-a1410y kernel: [  815.764022] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13282 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 13:38:35 martin-RB042AV-ABA-a1410y kernel: [  817.764507] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=13283 DF PROTO=TCP SPT=139 DPT=50978 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 14:39:21 martin-RB042AV-ABA-a1410y kernel: [ 4463.635967] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=13811 PROTO=UDP SPT=137 DPT=38051 LEN=70 

Jan 28 21:29:30 martin-RB042AV-ABA-a1410y kernel: [  116.947341] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=15141 PROTO=UDP SPT=137 DPT=38911 LEN=70 

Jan 28 21:29:44 martin-RB042AV-ABA-a1410y kernel: [  130.476593] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=15143 PROTO=UDP SPT=137 DPT=36240 LEN=70 

Jan 28 21:29:45 martin-RB042AV-ABA-a1410y kernel: [  131.478950] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=15144 PROTO=UDP SPT=137 DPT=40985 LEN=70 

Jan 28 21:32:53 martin-RB042AV-ABA-a1410y kernel: [  320.026148] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=15308 PROTO=UDP SPT=137 DPT=41874 LEN=70 

Jan 28 21:32:54 martin-RB042AV-ABA-a1410y kernel: [  321.028309] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=15309 PROTO=UDP SPT=137 DPT=55199 LEN=70 

Jan 28 21:32:55 martin-RB042AV-ABA-a1410y kernel: [  322.085727] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15310 DF PROTO=TCP SPT=445 DPT=42692 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:32:57 martin-RB042AV-ABA-a1410y kernel: [  324.085840] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15312 DF PROTO=TCP SPT=445 DPT=42692 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:32:58 martin-RB042AV-ABA-a1410y kernel: [  324.523420] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15313 DF PROTO=TCP SPT=139 DPT=51516 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:32:59 martin-RB042AV-ABA-a1410y kernel: [  326.086022] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15314 DF PROTO=TCP SPT=445 DPT=42692 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:33:00 martin-RB042AV-ABA-a1410y kernel: [  326.539156] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15315 DF PROTO=TCP SPT=139 DPT=51516 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:33:01 martin-RB042AV-ABA-a1410y kernel: [  328.101691] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15316 DF PROTO=TCP SPT=445 DPT=42692 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:33:01 martin-RB042AV-ABA-a1410y kernel: [  328.289266] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15317 DF PROTO=TCP SPT=139 DPT=51518 WINDOW=256 RES=0x00 ACK URGP=0 

Jan 28 21:33:02 martin-RB042AV-ABA-a1410y kernel: [  328.539330] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15318 DF PROTO=TCP SPT=139 DPT=51516 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:33:13 martin-RB042AV-ABA-a1410y kernel: [  340.102793] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15335 DF PROTO=TCP SPT=445 DPT=42692 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:33:33 martin-RB042AV-ABA-a1410y kernel: [  360.417219] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=15353 DF PROTO=TCP SPT=139 DPT=51522 WINDOW=256 RES=0x00 ACK URGP=0 

Jan 28 21:48:07 martin-RB042AV-ABA-a1410y kernel: [  530.344765] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5656 DF PROTO=TCP SPT=445 DPT=55474 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:48:09 martin-RB042AV-ABA-a1410y kernel: [  532.344992] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5657 DF PROTO=TCP SPT=445 DPT=55474 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:48:09 martin-RB042AV-ABA-a1410y kernel: [  533.157553] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5658 DF PROTO=TCP SPT=139 DPT=57434 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:48:11 martin-RB042AV-ABA-a1410y kernel: [  534.345198] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5659 DF PROTO=TCP SPT=445 DPT=55474 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:48:11 martin-RB042AV-ABA-a1410y kernel: [  535.157688] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5660 DF PROTO=TCP SPT=139 DPT=57434 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:48:13 martin-RB042AV-ABA-a1410y kernel: [  536.345341] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5661 DF PROTO=TCP SPT=445 DPT=55474 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:48:13 martin-RB042AV-ABA-a1410y kernel: [  536.439087] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5662 DF PROTO=TCP SPT=139 DPT=57436 WINDOW=256 RES=0x00 ACK URGP=0 

Jan 28 21:48:13 martin-RB042AV-ABA-a1410y kernel: [  537.157896] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5664 DF PROTO=TCP SPT=139 DPT=57434 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:48:15 martin-RB042AV-ABA-a1410y kernel: [  538.345490] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5665 DF PROTO=TCP SPT=445 DPT=55474 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:48:15 martin-RB042AV-ABA-a1410y kernel: [  538.454837] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5666 DF PROTO=TCP SPT=139 DPT=57436 WINDOW=256 RES=0x00 ACK URGP=0 

Jan 28 21:48:27 martin-RB042AV-ABA-a1410y kernel: [  550.487132] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5684 DF PROTO=TCP SPT=139 DPT=57436 WINDOW=256 RES=0x00 ACK URGP=0 

Jan 28 21:48:49 martin-RB042AV-ABA-a1410y kernel: [  572.520306] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5692 DF PROTO=TCP SPT=445 DPT=55512 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:49:07 martin-RB042AV-ABA-a1410y kernel: [  590.508945] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=5733 DF PROTO=TCP SPT=139 DPT=57472 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 28 21:53:20 martin-RB042AV-ABA-a1410y kernel: [  844.190320] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=5754 PROTO=UDP SPT=137 DPT=53140 LEN=70 

Jan 28 21:53:21 martin-RB042AV-ABA-a1410y kernel: [  845.209853] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=5756 PROTO=UDP SPT=137 DPT=44807 LEN=70 

Jan 28 21:54:17 martin-RB042AV-ABA-a1410y kernel: [  901.270874] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=5762 PROTO=UDP SPT=137 DPT=43830 LEN=70 

Jan 28 21:54:19 martin-RB042AV-ABA-a1410y kernel: [  902.337486] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=5764 PROTO=UDP SPT=137 DPT=48207 LEN=70 

Jan 28 21:54:43 martin-RB042AV-ABA-a1410y kernel: [  926.552385] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=5781 PROTO=UDP SPT=137 DPT=39619 LEN=70 

Jan 28 21:54:44 martin-RB042AV-ABA-a1410y kernel: [  927.739979] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=5786 PROTO=UDP SPT=137 DPT=56377 LEN=70 

Jan 29 09:54:26 martin-RB042AV-ABA-a1410y kernel: [   39.322339] [UFW BLOCK]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=1
FLOWLBL=551649 PROTO=UDP SPT=8612 DPT=8612 LEN=24 

Jan 29 09:54:26 martin-RB042AV-ABA-a1410y kernel: [   39.322405] [UFW BLOCK]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=1
FLOWLBL=604548 PROTO=UDP SPT=8612 DPT=8610 LEN=24 

Jan 29 09:54:26 martin-RB042AV-ABA-a1410y kernel: [   39.332732] [UFW BLOCK]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=1
FLOWLBL=551649 PROTO=UDP SPT=8612 DPT=8612 LEN=24 

Jan 29 09:54:26 martin-RB042AV-ABA-a1410y kernel: [   39.332785] [UFW BLOCK]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=64 TC=0 HOPLIMIT=1
FLOWLBL=604548 PROTO=UDP SPT=8612 DPT=8610 LEN=24 

Jan 29 09:55:45 martin-RB042AV-ABA-a1410y kernel: [  118.438127] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=13375 PROTO=UDP SPT=137 DPT=44218 LEN=70 

Jan 29 09:55:53 martin-RB042AV-ABA-a1410y kernel: [  125.922053] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=13376 PROTO=UDP SPT=137 DPT=48393 LEN=70 

Jan 29 09:55:54 martin-RB042AV-ABA-a1410y kernel: [  126.938196] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=13377 PROTO=UDP SPT=137 DPT=36785 LEN=70 

Jan 29 09:56:02 martin-RB042AV-ABA-a1410y kernel: [  134.801871] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=13378 PROTO=UDP SPT=137 DPT=37513 LEN=70 

Jan 29 09:56:03 martin-RB042AV-ABA-a1410y kernel: [  135.813067] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=13379 PROTO=UDP SPT=137 DPT=51676 LEN=70 

Jan 29 09:58:53 martin-RB042AV-ABA-a1410y kernel: [  306.242891] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18817 DF PROTO=TCP SPT=445 DPT=44170 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:58:55 martin-RB042AV-ABA-a1410y kernel: [  308.258740] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18818 DF PROTO=TCP SPT=445 DPT=44170 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:58:55 martin-RB042AV-ABA-a1410y kernel: [  308.508660] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18819 DF PROTO=TCP SPT=139 DPT=43042 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:58:57 martin-RB042AV-ABA-a1410y kernel: [  310.258921] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18820 DF PROTO=TCP SPT=445 DPT=44170 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:58:57 martin-RB042AV-ABA-a1410y kernel: [  310.508902] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18821 DF PROTO=TCP SPT=139 DPT=43042 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:58:59 martin-RB042AV-ABA-a1410y kernel: [  311.743297] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18822 DF PROTO=TCP SPT=139 DPT=43044 WINDOW=256 RES=0x00 ACK URGP=0 

Jan 29 09:58:59 martin-RB042AV-ABA-a1410y kernel: [  312.258975] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18823 DF PROTO=TCP SPT=445 DPT=44170 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:58:59 martin-RB042AV-ABA-a1410y kernel: [  312.508924] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18825 DF PROTO=TCP SPT=139 DPT=43042 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:59:01 martin-RB042AV-ABA-a1410y kernel: [  313.744508] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18826 DF PROTO=TCP SPT=139 DPT=43044 WINDOW=256 RES=0x00 ACK URGP=0 

Jan 29 09:59:01 martin-RB042AV-ABA-a1410y kernel: [  314.264087] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18827 DF PROTO=TCP SPT=445 DPT=44170 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:59:14 martin-RB042AV-ABA-a1410y kernel: [  326.531251] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18846 DF PROTO=TCP SPT=139 DPT=43042 WINDOW=257 RES=0x00 ACK URGP=0 

Jan 29 09:59:34 martin-RB042AV-ABA-a1410y kernel: [  347.251955] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=41 TOS=0x00 PREC=0x00 TTL=128
ID=18860 DF PROTO=TCP SPT=139 DPT=43046 WINDOW=254 RES=0x00 ACK URGP=0 

Jan 29 10:25:52 martin-RB042AV-ABA-a1410y kernel: [ 1924.879004] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27191 DF PROTO=UDP SPT=49690 DPT=137 LEN=58 

Jan 29 10:25:52 martin-RB042AV-ABA-a1410y kernel: [ 1924.879015] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27191 DF PROTO=UDP SPT=49690 DPT=137 LEN=58 

Jan 29 10:25:52 martin-RB042AV-ABA-a1410y kernel: [ 1924.879040] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27191 DF PROTO=UDP SPT=49690 DPT=137 LEN=58 

Jan 29 10:25:52 martin-RB042AV-ABA-a1410y kernel: [ 1924.879617] [UFW AUDIT]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=19021 PROTO=UDP SPT=137 DPT=49690 LEN=70 

Jan 29 10:25:52 martin-RB042AV-ABA-a1410y kernel: [ 1924.879635] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=19021 PROTO=UDP SPT=137 DPT=49690 LEN=70 

Jan 29 10:25:53 martin-RB042AV-ABA-a1410y kernel: [ 1925.894401] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27297 DF PROTO=UDP SPT=36685 DPT=137 LEN=58 

Jan 29 10:25:53 martin-RB042AV-ABA-a1410y kernel: [ 1925.894411] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27297 DF PROTO=UDP SPT=36685 DPT=137 LEN=58 

Jan 29 10:25:53 martin-RB042AV-ABA-a1410y kernel: [ 1925.894436] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27297 DF PROTO=UDP SPT=36685 DPT=137 LEN=58 

Jan 29 10:25:53 martin-RB042AV-ABA-a1410y kernel: [ 1925.894998] [UFW AUDIT]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=19022 PROTO=UDP SPT=137 DPT=36685 LEN=70 

Jan 29 10:25:53 martin-RB042AV-ABA-a1410y kernel: [ 1925.895015] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
ID=19022 PROTO=UDP SPT=137 DPT=36685 LEN=70 

Jan 29 10:25:54 martin-RB042AV-ABA-a1410y kernel: [ 1926.917627] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27310 DF PROTO=UDP SPT=39279 DPT=137 LEN=58 

Jan 29 10:25:54 martin-RB042AV-ABA-a1410y kernel: [ 1926.917638] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27310 DF PROTO=UDP SPT=39279 DPT=137 LEN=58 

Jan 29 10:25:54 martin-RB042AV-ABA-a1410y kernel: [ 1926.917662] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=27310 DF PROTO=UDP SPT=39279 DPT=137 LEN=58 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.326696] [UFW AUDIT]
IN= OUT=enp2s5 SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=97 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=57 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.326711] [UFW ALLOW]
IN= OUT=enp2s5 SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=97 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=57 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.326743] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=97 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=57 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.326877] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=224.0.0.251 LEN=77 TOS=0x00 PREC=0x00
TTL=255 ID=4896 DF PROTO=UDP SPT=5353 DPT=5353 LEN=57 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.326885] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=224.0.0.251 LEN=77 TOS=0x00 PREC=0x00
TTL=255 ID=4896 DF PROTO=UDP SPT=5353 DPT=5353 LEN=57 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.326901] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=192.168.254.39 DST=224.0.0.251 LEN=77 TOS=0x00
PREC=0x00 TTL=255 ID=4896 DF PROTO=UDP SPT=5353 DPT=5353 LEN=57 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.327084] [UFW AUDIT]
IN= OUT=lo SRC=127.0.0.1 DST=224.0.0.251 LEN=77 TOS=0x00 PREC=0x00 TTL=255
ID=48151 DF PROTO=UDP SPT=5353 DPT=5353 LEN=57 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.327107] [UFW AUDIT]
IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1
DST=224.0.0.251 LEN=77 TOS=0x00 PREC=0x00 TTL=255 ID=48151 DF PROTO=UDP
SPT=5353 DPT=5353 LEN=57 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.327911] [UFW AUDIT]
IN= OUT=lo SRC=127.0.0.1 DST=224.0.0.251 LEN=87 TOS=0x00 PREC=0x00 TTL=255
ID=48152 DF PROTO=UDP SPT=5353 DPT=5353 LEN=67 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.327938] [UFW AUDIT]
IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1
DST=224.0.0.251 LEN=87 TOS=0x00 PREC=0x00 TTL=255 ID=48152 DF PROTO=UDP
SPT=5353 DPT=5353 LEN=67 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.354046] [UFW AUDIT]
IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64
ID=17087 DF PROTO=TCP SPT=53176 DPT=139 WINDOW=43690 RES=0x00 SYN URGP=0 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.354082] [UFW AUDIT]
IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1
DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=17087 DF PROTO=TCP
SPT=53176 DPT=139 WINDOW=43690 RES=0x00 SYN URGP=0 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.391999] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=224.0.0.251 LEN=87 TOS=0x00 PREC=0x00
TTL=255 ID=4900 DF PROTO=UDP SPT=5353 DPT=5353 LEN=67 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.392010] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=224.0.0.251 LEN=87 TOS=0x00 PREC=0x00
TTL=255 ID=4900 DF PROTO=UDP SPT=5353 DPT=5353 LEN=67 

Jan 29 10:26:05 martin-RB042AV-ABA-a1410y kernel: [ 1938.392034] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=192.168.254.39 DST=224.0.0.251 LEN=87 TOS=0x00
PREC=0x00 TTL=255 ID=4900 DF PROTO=UDP SPT=5353 DPT=5353 LEN=67 

Jan 29 10:26:11 martin-RB042AV-ABA-a1410y kernel: [ 1943.717505] [UFW AUDIT]
IN= OUT=lo SRC=192.168.254.39 DST=192.168.254.39 LEN=60 TOS=0x00 PREC=0x00
TTL=64 ID=54165 DF PROTO=TCP SPT=39336 DPT=445 WINDOW=43690 RES=0x00 SYN
URGP=0 

Jan 29 10:26:14 martin-RB042AV-ABA-a1410y kernel: [ 1946.875135] [UFW AUDIT]
IN= OUT=lo SRC=192.168.254.39 DST=192.168.254.39 LEN=60 TOS=0x00 PREC=0x00
TTL=64 ID=33612 DF PROTO=TCP SPT=39338 DPT=445 WINDOW=43690 RES=0x00 SYN
URGP=0 

Jan 29 10:26:14 martin-RB042AV-ABA-a1410y kernel: [ 1946.875171] [UFW AUDIT]
IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=192.168.254.39
DST=192.168.254.39 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=33612 DF PROTO=TCP
SPT=39338 DPT=445 WINDOW=43690 RES=0x00 SYN URGP=0 

Jan 29 10:26:14 martin-RB042AV-ABA-a1410y kernel: [ 1946.949906] [UFW AUDIT]
IN= OUT=lo SRC=192.168.254.39 DST=192.168.254.39 LEN=60 TOS=0x00 PREC=0x00
TTL=64 ID=12519 DF PROTO=TCP SPT=39340 DPT=445 WINDOW=43690 RES=0x00 SYN
URGP=0 

Jan 29 10:27:05 martin-RB042AV-ABA-a1410y kernel: [ 1998.156899] [UFW AUDIT]
IN=enp2s5 OUT= MAC=ff:ff:ff:ff:ff:ff:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.255 LEN=235 TOS=0x00 PREC=0x00 TTL=128
ID=1458 PROTO=UDP SPT=138 DPT=138 LEN=215 

Jan 29 10:27:16 martin-RB042AV-ABA-a1410y kernel: [ 2008.648626] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=45.76.244.202 LEN=76 TOS=0x18
PREC=0xA0 TTL=64 ID=19205 DF PROTO=UDP SPT=123 DPT=123 LEN=56 

Jan 29 10:27:16 martin-RB042AV-ABA-a1410y kernel: [ 2008.648637] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=45.76.244.202 LEN=76 TOS=0x18
PREC=0xA0 TTL=64 ID=19205 DF PROTO=UDP SPT=123 DPT=123 LEN=56 

Jan 29 10:28:30 martin-RB042AV-ABA-a1410y kernel: [ 2082.588140] [UFW AUDIT]
IN= OUT=lo SRC=127.0.0.1 DST=224.0.0.251 LEN=201 TOS=0x00 PREC=0x00 TTL=255
ID=54203 DF PROTO=UDP SPT=5353 DPT=5353 LEN=181 

Jan 29 10:28:30 martin-RB042AV-ABA-a1410y kernel: [ 2082.588177] [UFW AUDIT]
IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1
DST=224.0.0.251 LEN=201 TOS=0x00 PREC=0x00 TTL=255 ID=54203 DF PROTO=UDP
SPT=5353 DPT=5353 LEN=181 

Jan 29 10:28:30 martin-RB042AV-ABA-a1410y kernel: [ 2082.976165] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=224.0.0.251 LEN=201 TOS=0x00 PREC=0x00
TTL=255 ID=36483 DF PROTO=UDP SPT=5353 DPT=5353 LEN=181 

Jan 29 10:28:30 martin-RB042AV-ABA-a1410y kernel: [ 2082.976175] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=224.0.0.251 LEN=201 TOS=0x00 PREC=0x00
TTL=255 ID=36483 DF PROTO=UDP SPT=5353 DPT=5353 LEN=181 

Jan 29 10:28:30 martin-RB042AV-ABA-a1410y kernel: [ 2082.976199] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=192.168.254.39 DST=224.0.0.251 LEN=201 TOS=0x00
PREC=0x00 TTL=255 ID=36483 DF PROTO=UDP SPT=5353 DPT=5353 LEN=181 

Jan 29 10:28:31 martin-RB042AV-ABA-a1410y kernel: [ 2083.673609] [UFW AUDIT]
IN= OUT=enp2s5 SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=221 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=181 

Jan 29 10:28:31 martin-RB042AV-ABA-a1410y kernel: [ 2083.673624] [UFW ALLOW]
IN= OUT=enp2s5 SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=221 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=181 

Jan 29 10:28:31 martin-RB042AV-ABA-a1410y kernel: [ 2083.673658] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=221 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=181 

Jan 29 10:28:51 martin-RB042AV-ABA-a1410y kernel: [ 2103.806153] [UFW AUDIT]
IN=enp2s5 OUT= MAC=ff:ff:ff:ff:ff:ff:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128
ID=1506 PROTO=UDP SPT=137 DPT=137 LEN=58 

Jan 29 10:28:52 martin-RB042AV-ABA-a1410y kernel: [ 2104.552923] [UFW AUDIT]
IN=enp2s5 OUT= MAC=ff:ff:ff:ff:ff:ff:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128
ID=1507 PROTO=UDP SPT=137 DPT=137 LEN=58 

Jan 29 10:28:52 martin-RB042AV-ABA-a1410y kernel: [ 2105.303002] [UFW AUDIT]
IN=enp2s5 OUT= MAC=ff:ff:ff:ff:ff:ff:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128
ID=1508 PROTO=UDP SPT=137 DPT=137 LEN=58 

Jan 29 10:29:20 martin-RB042AV-ABA-a1410y kernel: [ 2133.092643] [UFW AUDIT]
IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.53 LEN=75 TOS=0x00 PREC=0x00 TTL=64
ID=31170 DF PROTO=UDP SPT=55648 DPT=53 LEN=55 

Jan 29 10:29:20 martin-RB042AV-ABA-a1410y kernel: [ 2133.092679] [UFW AUDIT]
IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1
DST=127.0.0.53 LEN=75 TOS=0x00 PREC=0x00 TTL=64 ID=31170 DF PROTO=UDP
SPT=55648 DPT=53 LEN=55 

Jan 29 10:29:20 martin-RB042AV-ABA-a1410y kernel: [ 2133.092720] [UFW AUDIT]
IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.53 LEN=75 TOS=0x00 PREC=0x00 TTL=64
ID=31171 DF PROTO=UDP SPT=55648 DPT=53 LEN=55 

Jan 29 10:29:20 martin-RB042AV-ABA-a1410y kernel: [ 2133.092733] [UFW AUDIT]
IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1
DST=127.0.0.53 LEN=75 TOS=0x00 PREC=0x00 TTL=64 ID=31171 DF PROTO=UDP
SPT=55648 DPT=53 LEN=55 

Jan 29 10:29:20 martin-RB042AV-ABA-a1410y kernel: [ 2133.093348] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.254 LEN=75 TOS=0x00
PREC=0x00 TTL=64 ID=32993 DF PROTO=UDP SPT=39853 DPT=53 LEN=55 

Jan 29 10:29:20 martin-RB042AV-ABA-a1410y kernel: [ 2133.093357] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.254 LEN=75 TOS=0x00
PREC=0x00 TTL=64 ID=32993 DF PROTO=UDP SPT=39853 DPT=53 LEN=55 

Jan 29 10:29:20 martin-RB042AV-ABA-a1410y kernel: [ 2133.093730] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.254 LEN=75 TOS=0x00
PREC=0x00 TTL=64 ID=32994 DF PROTO=UDP SPT=60515 DPT=53 LEN=55 

Jan 29 10:29:20 martin-RB042AV-ABA-a1410y kernel: [ 2133.093737] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.254 LEN=75 TOS=0x00
PREC=0x00 TTL=64 ID=32994 DF PROTO=UDP SPT=60515 DPT=53 LEN=55 

Jan 29 10:29:21 martin-RB042AV-ABA-a1410y kernel: [ 2134.093673] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=104.198.143.177 LEN=60 TOS=0x00
PREC=0x00 TTL=64 ID=17747 DF PROTO=TCP SPT=58058 DPT=80 WINDOW=29200
RES=0x00 SYN URGP=0 

Jan 29 10:29:21 martin-RB042AV-ABA-a1410y kernel: [ 2134.093685] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=104.198.143.177 LEN=60 TOS=0x00
PREC=0x00 TTL=64 ID=17747 DF PROTO=TCP SPT=58058 DPT=80 WINDOW=29200
RES=0x00 SYN URGP=0 

Jan 29 10:29:22 martin-RB042AV-ABA-a1410y kernel: [ 2135.095060] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=104.198.143.177 LEN=60 TOS=0x00
PREC=0x00 TTL=64 ID=17748 DF PROTO=TCP SPT=58058 DPT=80 WINDOW=29200
RES=0x00 SYN URGP=0 

Jan 29 10:29:22 martin-RB042AV-ABA-a1410y kernel: [ 2135.095092] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=104.198.143.177 LEN=60 TOS=0x00
PREC=0x00 TTL=64 ID=17748 DF PROTO=TCP SPT=58058 DPT=80 WINDOW=29200
RES=0x00 SYN URGP=0 

Jan 29 10:29:24 martin-RB042AV-ABA-a1410y kernel: [ 2137.111067] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=104.198.143.177 LEN=60 TOS=0x00
PREC=0x00 TTL=64 ID=17749 DF PROTO=TCP SPT=58058 DPT=80 WINDOW=29200
RES=0x00 SYN URGP=0 

Jan 29 10:29:28 martin-RB042AV-ABA-a1410y kernel: [ 2141.142999] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=104.198.143.177 LEN=60 TOS=0x00
PREC=0x00 TTL=64 ID=17750 DF PROTO=TCP SPT=58058 DPT=80 WINDOW=29200
RES=0x00 SYN URGP=0 

Jan 29 10:29:36 martin-RB042AV-ABA-a1410y kernel: [ 2149.334915] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=104.198.143.177 LEN=60 TOS=0x00
PREC=0x00 TTL=64 ID=17751 DF PROTO=TCP SPT=58058 DPT=80 WINDOW=29200
RES=0x00 SYN URGP=0 

Jan 29 10:29:36 martin-RB042AV-ABA-a1410y kernel: [ 2149.334943] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=104.198.143.177 LEN=60 TOS=0x00
PREC=0x00 TTL=64 ID=17751 DF PROTO=TCP SPT=58058 DPT=80 WINDOW=29200
RES=0x00 SYN URGP=0 

Jan 29 10:29:56 martin-RB042AV-ABA-a1410y kernel: [ 2169.087738] [UFW AUDIT]
IN= OUT=enp2s5 SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=187 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=147 

Jan 29 10:29:56 martin-RB042AV-ABA-a1410y kernel: [ 2169.087754] [UFW ALLOW]
IN= OUT=enp2s5 SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=187 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=147 

Jan 29 10:29:56 martin-RB042AV-ABA-a1410y kernel: [ 2169.087789] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=fe80:0000:0000:0000:368d:74dd:abec:eba0
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=187 TC=0 HOPLIMIT=255
FLOWLBL=432285 PROTO=UDP SPT=5353 DPT=5353 LEN=147 

Jan 29 10:29:56 martin-RB042AV-ABA-a1410y kernel: [ 2169.087987] [UFW AUDIT]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=224.0.0.251 LEN=167 TOS=0x00 PREC=0x00
TTL=255 ID=44895 DF PROTO=UDP SPT=5353 DPT=5353 LEN=147 

Jan 29 10:29:56 martin-RB042AV-ABA-a1410y kernel: [ 2169.087996] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=224.0.0.251 LEN=167 TOS=0x00 PREC=0x00
TTL=255 ID=44895 DF PROTO=UDP SPT=5353 DPT=5353 LEN=147 

Jan 29 10:29:56 martin-RB042AV-ABA-a1410y kernel: [ 2169.088013] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=192.168.254.39 DST=224.0.0.251 LEN=167 TOS=0x00
PREC=0x00 TTL=255 ID=44895 DF PROTO=UDP SPT=5353 DPT=5353 LEN=147 

Jan 29 10:29:56 martin-RB042AV-ABA-a1410y kernel: [ 2169.088579] [UFW AUDIT]
IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1
DST=224.0.0.251 LEN=167 TOS=0x00 PREC=0x00 TTL=255 ID=58759 DF PROTO=UDP
SPT=5353 DPT=5353 LEN=147 

Jan 29 10:30:02 martin-RB042AV-ABA-a1410y kernel: [ 2175.202804] [UFW ALLOW]
IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=50973 DF PROTO=UDP SPT=137 DPT=137 LEN=58 

Jan 29 10:30:02 martin-RB042AV-ABA-a1410y kernel: [ 2175.202832] [UFW AUDIT]
IN=enp2s5 OUT= MAC= SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00
PREC=0x00 TTL=64 ID=50973 DF PROTO=UDP SPT=137 DPT=137 LEN=58 

 

 

Regards,

 

Marty

Reindl Harald

2019-Jan-29 15:43 UTC

head link

[Samba] Samba and UFW

Am 29.01.19 um 16:39 schrieb Marty via samba:> Here is the ufw.log after enabling logging medium and trying to connect to
> the windows net. Unfortunately the web Microsoft page is in German. I think
> it says window uses smb1 syntax.
> 
> Jan 27 15:11:09 martin-RB042AV-ABA-a1410y kernel: [  887.241685] [UFW
BLOCK]
> IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
> SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
> ID=10646 PROTO=UDP SPT=137 DPT=52944 LEN=70 
> 
> Jan 27 15:11:21 martin-RB042AV-ABA-a1410y kernel: [  899.315443] [UFW
BLOCK]
> IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
> SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
> ID=10652 PROTO=UDP SPT=137 DPT=58971 LEN=70 given that the source port is always 137 and the destijnation port
random it looks like your firewall just hasn't proper connection
tracking to allow repsonse packets aka RELATED,ESTABLISHED

L.P.H. van Belle

2019-Jan-29 16:32 UTC

head link

[Samba] Samba and UFW

You only need this : ( change to your needs ) 
ufw allow in proto tcp from 192.168.0.0/24 to any port 139,445 comment
'Allow in port 139,445 (CIFS)'

I suggest, 

First check : 
cat /etc/default/ufw 

Check if this line is there and this modules is enabled.
IPT_MODULES="nf_conntrack_netbios_ns"

Then 

ufw disable 
ufw reset
ufw limit 22

# adjust this line to you needs. 
ufw allow in proto tcp from 192.168.0.0/24 to any port 139,445 comment
'Allow in port 139,445 (CIFS)'

#Or with network interaface names: 
ufw allow in on eth0 proto tcp from 192.168.0.0/24 to any port 139,445 comment
'Allow in on eth0 port 139,445 (CIFS)'

Or run iptables -S and show the output. 

Last, can you shown the output of : 
for x in $(rgrep -i samba /etc/ufw/* | cut -d":" -f1) ; do cat $x ;
done

Then i can see if something is wrong in the application profiles. 
I grep on samba since is saw you enabled a "(Samba)"  profile.


##########
# A full set for a closed setup. ( nothing in/out ) compatible with older samba
version.
# a "allow out" firewall, only needs the IN lines. 
# 192.168.0.1 and 192.168.0.2 are the DC's .

# (IN) FROM ADDC'S 
ufw allow in proto tcp from 192.168.0.1 port 389,1024:65535 to any port
1024:65535
ufw allow in proto tcp from 192.168.0.2 port 389,1024:65535 to any port
1024:65535

# (OUT) TO ADDC'S 
# DC1
ufw allow out proto udp from any port 1024:65535 to 192.168.0.1 port 137,138
ufw allow out proto tcp from any port 1024:65535 to 192.168.0.1 port
135,139,445,636,3268,3269
ufw allow out proto udp from any port 53,1024:65535 to 192.168.0.1 port
53,88,123,389,464,1024:65535
ufw allow out proto tcp from any port 53,1024:65535 to 192.168.0.1 port
53,88,123,389,464,1024:65535
# DC1 
ufw allow out proto udp from any port 1024:65535 to 192.168.0.2 port 137,138
ufw allow out proto tcp from any port 1024:65535 to 192.168.0.2 port
135,139,445,636,3268,3269
ufw allow out proto udp from any port 53,1024:65535 to 192.168.0.2 port
53,88,123,389,464,1024:65535
ufw allow out proto tcp from any port 53,1024:65535 to 192.168.0.2 port
53,88,123,389,464,1024:65535

# (IN) MEMBER 
# TO THIS MEMBER SERVER (with shares) 
ufw allow in on eno1 proto tcp from 192.168.249.0/24 to any port 139,445 comment
'Allow in on eno1 port 139,445 (CIFS smbd)'
#ufw allow in on eno1 proto udp from 192.168.249.0/24 to any port 137,138
comment 'Allow in on eno1 port 137,138 (BROWSER nmbd)'  << i dont
use this one.
##########


Greetz, 

Louis

 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Reindl Harald via samba
> Verzonden: dinsdag 29 januari 2019 16:44
> Aan: mmcg29440 at frontier.com; samba at lists.samba.org
> Onderwerp: Re: [Samba] Samba and UFW
> 
> 
> 
> Am 29.01.19 um 16:39 schrieb Marty via samba:
> > Here is the ufw.log after enabling logging medium and 
> trying to connect to
> > the windows net. Unfortunately the web Microsoft page is in 
> German. I think
> > it says window uses smb1 syntax.
> > 
> > Jan 27 15:11:09 martin-RB042AV-ABA-a1410y kernel: [  
> 887.241685] [UFW BLOCK]
> > IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
> > SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 
> PREC=0x00 TTL=128
> > ID=10646 PROTO=UDP SPT=137 DPT=52944 LEN=70 
> > 
> > Jan 27 15:11:21 martin-RB042AV-ABA-a1410y kernel: [  
> 899.315443] [UFW BLOCK]
> > IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
> > SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 
> PREC=0x00 TTL=128
> > ID=10652 PROTO=UDP SPT=137 DPT=58971 LEN=70 
> given that the source port is always 137 and the destijnation port
> random it looks like your firewall just hasn't proper connection
> tracking to allow repsonse packets aka RELATED,ESTABLISHED
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Marty McGlensey

2019-Jan-29 16:54 UTC

head link

[Samba] Samba and UFW

Reindl,

I will check that. Not sure how fix it. Will look on internet. Would you give
some more information on the subject.

Thanks

Sent from my iPad
Marty (843)-546-4822

> On Jan 29, 2019, at 10:43 AM, Reindl Harald <h.reindl at
thelounge.net> wrote:
> 
> 
> 
>> Am 29.01.19 um 16:39 schrieb Marty via samba:
>> Here is the ufw.log after enabling logging medium and trying to connect
to
>> the windows net. Unfortunately the web Microsoft page is in German. I
think
>> it says window uses smb1 syntax.
>> 
>> Jan 27 15:11:09 martin-RB042AV-ABA-a1410y kernel: [  887.241685] [UFW
BLOCK]
>> IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
>> SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
>> ID=10646 PROTO=UDP SPT=137 DPT=52944 LEN=70 
>> 
>> Jan 27 15:11:21 martin-RB042AV-ABA-a1410y kernel: [  899.315443] [UFW
BLOCK]
>> IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
>> SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
>> ID=10652 PROTO=UDP SPT=137 DPT=58971 LEN=70 
> given that the source port is always 137 and the destijnation port
> random it looks like your firewall just hasn't proper connection
> tracking to allow repsonse packets aka RELATED,ESTABLISHED

Possibly Parallel Threads

Search for more possibly parallel threads

samba - Jan 2019 - Samba and UFW

[Samba] Samba and UFW

[Samba] Samba and UFW

[Samba] Samba and UFW

[Samba] Samba and UFW

Possibly Parallel Threads