Wifi 6 AX1800 / WAX214v2 Kernel Warnings

[fcambron]

I got all the time kernel warnings like:

Mon Mar 17 11:11:23 2025 kern.warn kernel: [9931993.358595] IN= OUT=lo src=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=53725 DF PROTO=TCP SPT=59850 DPT=10080 WINDOW=43690 RES=0x00 SYN URGP=0
Mon Mar 17 11:11:22 2025 kern.warn kernel: [9931993.209474] IN= OUT=lo src=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=50510 DF PROTO=TCP SPT=59848 DPT=10080 WINDOW=43690 RES=0x00 SYN URGP=0
Mon Mar 17 11:11:22 2025 kern.warn kernel: [9931993.071270] IN= OUT=lo src=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=55149 DF PROTO=TCP SPT=59846 DPT=10080 WINDOW=43690 RES=0x00 SYN URGP=0
Mon Mar 17 11:11:22 2025 kern.warn kernel: [9931992.615217] IN= OUT=lo src=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=43705 DF PROTO=TCP SPT=59844 DPT=10080 WINDOW=43690 RES=0x00 SYN URGP=0

What could be the reason for this?

[schumaku]

---

@fcambron wrote:

I got all the time kernel warnings like:

Mon Mar 17 11:11:23 2025 kern.warn kernel: [9931993.358595] IN= OUT=lo src=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=53725 DF PROTO=TCP SPT=59850 DPT=10080 WINDOW=43690 RES=0x00 SYN URGP=0

...

Reads to me like iptables (protecting the device admin environment) dropping IP frames, reaching your WAX214v2, where the AP management part does not have to care about. 

Possible, there are some applications (intended or malware) on your LAN using the destination port 10080/TCP. Several device vendors are using some magic create dynamic NAT mappings back to the source host, or certain backup/archiving applications like Amanda are making use of these (more common was originally UDP for all these, but many had added TCP over time).