Re: Ports getting hammered?
- From: SHRED <noone@xxxxxxxxxxx>
- Date: Mon, 02 Jan 2006 10:01:36 -0800
Duane Arnold wrote:
"SHRED" <noone@xxxxxxxxxxx> wrote in message news:baduf.6609$JT.1968@xxxxxxxxxxxxx
Duane Arnold wrote:
"SHRED" <noone@xxxxxxxxxxx> wrote in message news:vLcuf.6541$JT.5496@xxxxxxxxxxxxx
I no very little about firewalls. My setup:
Cable access 4 port SMC Barricade Router 2 computers
I recently installed ZoneAlarm and it is blocking attempts at port access.
And you know this is happening with WAN Internet IP(s) or LAN IP(s) - your machines behind the router?
I thought that having a physical firewall, like the SMC, stopped that at the router?
You may have something else happeing like some kind of mis-config of the router and there are ports open or something like that or it's LAN traffic that ZA is blocking.
Duane :)
These were pings from WAN. Both computers are behind the SMC.
I did have "Virtual Server" settings, in the SMC Firewall, with service ports 6881-6991 "enabled".
I just unchecked/disabled them. I think I had them that way a long time ago for online gaming.
Would that make a difference?
Of course manually opened ports are going to be probed. Are those the ports in question? Does the router have logging what model SMC router is this?
Duane :)
No log for the SMC Barricade 4port router.
ZA has a log file but they are not the ports I had open on the router; I don't think.
I know next to nothing about this. Just wondering if I should be concerned. Thanks
--- fwpktlog.txt
22421 LogFileCreated
4798765 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 70.26.159.79 Dest: 192.168.123.143 SrcPort: 21069 DstPort: 1467
4954953 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 84.242.186.54 Dest: 192.168.123.143 SrcPort: 20449 DstPort: 1668
5101234 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 82.159. 0.187 Dest: 192.168.123.143 SrcPort: 7524 DstPort: 1689
5263812 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 218.19.119.233 Dest: 192.168.123.143 SrcPort: 48351 DstPort: 1689
5421375 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 220.164.158.114 Dest: 192.168.123.143 SrcPort: 11462 DstPort: 1689
5511984 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 212.84.159.166 Dest: 192.168.123.143 SrcPort: 10983 DstPort: 1689
6318296 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 82.159. 0.187 Dest: 192.168.123.143 SrcPort: 7524 DstPort: 1689
6464218 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 218.19.119.233 Dest: 192.168.123.143 SrcPort: 35666 DstPort: 1689
6716640 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 212.84.159.166 Dest: 192.168.123.143 SrcPort: 10983 DstPort: 1689
7068187 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 24.12.75.183 Dest: 192.168.123.143 SrcPort: 1309 DstPort: 1689
7513046 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 82.159. 0.187 Dest: 192.168.123.143 SrcPort: 7524 DstPort: 1689
7664703 Packet DROPPED: Proto: IP_UDP Flags: 0x0000000a Src: 218.19.119.233 Dest: 192.168.123.143 SrcPort: 23421 DstPort: 1689
.
- Follow-Ups:
- Re: Ports getting hammered?
- From: Somebody.
- Re: Ports getting hammered?
- From: Duane Arnold
- Re: Ports getting hammered?
- References:
- Ports getting hammered?
- From: SHRED
- Re: Ports getting hammered?
- From: Duane Arnold
- Re: Ports getting hammered?
- From: SHRED
- Re: Ports getting hammered?
- From: Duane Arnold
- Ports getting hammered?
- Prev by Date: Re: Ports getting hammered?
- Next by Date: Re: Ports getting hammered?
- Previous by thread: Re: Ports getting hammered?
- Next by thread: Re: Ports getting hammered?
- Index(es):
Relevant Pages
|