Never thought about him coming in on 443. That is probably why iptables is missing the drop. He is getting into the special log because the port 443 is being hit through the first server 'listen 443 ssl'. I am not a complete newbie, but still learning. Thanks for the help.
↧