@anon50890781:
Yes, 192.168.178.1 is the ISP modem/router and 192.168.178.11 is the TO router.
The amazon and google ip’s/traffic look suspicious to me to. I don’t have accounts at neither of these companies. Amazon I rarely visit. Only if someone on a forum provides a link to a product on amazon, I only have a look at it.
From google I sometimes use translate, maps and youtube. But I almost never use the search engine google. I use startpage.com as primary search engine.
Also I use Firefox with the Ghostery plug-in. And except for a few sites I visit on a daily basis, like several forums and others, I use the normal Firefox browser to use cookies to remember login details. For all other sites I use Firefox private browsing.
So, why would there be traffic from amazon and google?
The dumpfile I made while doing nothing on the internet to get only the suspicious traffic.
The only LAN hosts connected at that time where my laptop (Xubuntu) and the Pi running Domoticz.
But I figured out a way to monitor a single LAN IP with tcpdump and it showed no traffic with my Pi. Only when I refreshed the Domoticz web interface on my laptop, that traffic showed up. Only the IP-addresses of the Pi and my laptop.
Because I flashed my Omnia with a new software image, there should be nothing left of anything that was on the old software. Is it possible that this traffic is generated by the devices from the outside IP’s still trying to connect?
@hadc:
I have the Domoticz Pi running now for about one and a half week.
To have access to the Domoticz web interface from WAN I saw in a description on a website I had to open port 8080. So, I opened that port only to the IP of the Pi and configured Domoticz to ask for a username and password.
Several days later I found a better description which pointed out that port 8080 is not a secure connection and for WAN connections you should use port 443 and open the web interface with https.
I removed the 8080 port forward and replaced it with the 443 port forward. And also only to the IP of the Pi.
This is the only port forward I have at this time.