The packet was dropped by Misc.

Options
TommyB
TommyB Posts: 2 image  Freshman Member
First Comment
in Security

USG 310

We are having problems contacting a server on internet. While troubleshooting we found that we can ping the host directly from the WAN interface on the firewall, but not from inside. Either from a computer or by pinging through LAN interface on firewall.

I don't see anything in the config that would block this traffic.

I found this in routing traces:

The packet outgoing interface: WAN1
The packet outgoing interface: x
The packet was dropped by Misc.

What is misc? I tried searching for this statement but found no hits at all. Are there any steps I can use to troubleshoot it further?

All Replies

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,568 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    edited November 2023

    Hi @TommyB,

    Welcome to Zyxel community. does it have any blocked log in event log(MONITOR > Log > View log)?

  • TommyB
    TommyB Posts: 2 image  Freshman Member
    First Comment

    Thanks Cooldia!

    I could not stay away from it and added an allow rule at the top of the security policy. Problem was that we had a FQDN object that blocks access to a news site that is hosted on AWS which seems to be shared with the site we were trying to reach.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,568 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    If the destination shares the same IP address, it will be blocked by the security policy.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）