January 13, 201610 yr Just a quick question for the unraid wizards out there. My router setup allows me to track and block unapproved network connections and I see that there is one curious source that attempts outgoing connections on a regular basis from my unraid machine to the same IP in Europe. Normally I would expect the source IP to be the one I had assigned to the unraid box during setup ( i.e. 192.168.x.x) however the source IP in this case is always 172.17.0.4 I currently have a 6.1.6 setup with a handful of dockers (CP, SB, Plex etc), but no vms. Given that I am not a networking/IT guru... Does anyone know of a way that I can dig deeper and find from where these attempts are coming from?
January 14, 201610 yr disable the containers one at a time and see when it disappears... Its probably Plex communicating with its server's
January 14, 201610 yr Author Thanks Squid! I have narrowed it down to the Sickrage plugin that I have. I have also determined that the destination IP is one of the lesser known usenet trackers that I have enabled to search from. Oddly enough the packets seem to go through fine when the source IP is that of the unraid machine. They don't go through though when the source IP is 172.17.0.4 ... The only difference I see with the 172. packets is that they are TCP-RA rather than TCP-S. The other trackers I use do not trigger this behavior. Any ideas why source IP would flip flop like this?
January 14, 201610 yr Thanks Squid! I have narrowed it down to the Sickrage plugin that I have. I have also determined that the destination IP is one of the lesser known usenet trackers that I have enabled to search from. Oddly enough the packets seem to go through fine when the source IP is that of the unraid machine. They don't go through though when the source IP is 172.17.0.4 ... The only difference I see with the 172. packets is that they are TCP-RA rather than TCP-S. The other trackers I use do not trigger this behavior. Any ideas why source IP would flip flop like this? 172.x is the internal docker network, all the containers are on it within docker. Why you are seeing that specific behaviour I have no idea.
Archived
This topic is now archived and is closed to further replies.