Presently iptables is blocking all outbound traffic except for a few known/approved services. iptables logs a sample of each time it blocks (2/min),
I am trying to figure out what is making the requests that IPTable blocks.
Sep 17 06:30:39 [_REDACTED_] kernel: [936079.231998] iptables output drop: IN= OUT=eth0 SRC=[_REDACTED_] DST=[_REDACTED_] LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=25628 DF PROTO=TCP SPT=53657 DPT=80 WINDOW=14600 RES=0x00 SYN URGP=0
How do I figure out what is making this request?