Ok.. I'm having the same problem...
Here's the log:
Code:
Sample of block hits:
May 26 16:07:09 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=27524 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:07:12 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=27554 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:07:37 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=27839 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:07:38 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=27894 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:07:38 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=27963 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:07:39 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=27991 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:08:08 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=30174 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:08:09 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=30176 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:08:10 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=30179 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:08:11 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=30206 PROTO=UDP SPT=49474 DPT=9987 LEN=167
May 26 16:08:12 host2 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:18:8b:fc:c3:3e:00:1a:a1:1c:35:7f:08:00 SRC=###.###.###.### DST=###.###.###.### LEN=187 TOS=0x00 PREC=0x00 TTL=33 ID=30207 PROTO=UDP SPT=49474 DPT=9987 LEN=167
As you can see the Detination Port is UDP 9987...
In CSF's Firewall config I have the following set:
TCP_IN = 20,21,22,25,53,80,110,143,443,465,953,993,995,
2008,8000,
10011,15404,2077,2078,2082,2083,2086,2087,2095,2096,3306,27015,
30033,49160:49300
TCP_OUT = 20,21,22,25,37,43,53,80,110,113,443,587,873,953,
2008,8000,
10011,15404,2087,2089,2703,3306,7002,5273,27030:27040,
30033,49160:49300
UDP_IN = 20,21,53,953,
9987,
10011,3306,27015,27012,
30033,49160:49300
UDP_OUT = 0:65535
Teamspeak 3 requires:
UDP: 9987
TCP: 10011, 30033, and 2008
As you can see from the bold numbers in the port list, all four ports are in the lists where they belong.. yet when a person is not in the firewall IP Allow list the firewall blocks them for port scanning.. As it is I wont be adding everyone into the allow list that may or may not use this TS3 server.. so how do I fix this? Is there something I'm missing or what?
Just for the record.. the TS3 server works fine and everyone can connect when CSF is disabled... So it has to be something in the firewall... I really do need help with this..