Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Explanation of Router firewall warnings


  • Please log in to reply
1 reply to this topic

#1 bluebird100

bluebird100

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:09:41 AM

Posted 28 April 2012 - 10:15 AM

Hi,
last two days Ive been getting warnings when checking my routers ( Bt Home Hub 2 wireless) firewall history event history -security. Under advice I turned off UpnP yesterday afternoon. Jsut checked again And get the follwoing messages:

The 81.xxx adress corresponds to my Network Ip adrress The 192xxx .66 realtes to a family members Ipod. What is going on here & what is The Ipod trying to do - no one was anyhwere nearer it at this time of the morning.

Very grateful if
1)anyone could explain what these messages mean &
2)perhaps help me understand what thsi Ipod is trying to do - without anyone using it?.
3)Also, should my Norton 360 be picking up these attempts at connection at all - I cant see any such warnings in Norton?. Appreciate anyones help.

:38:06 28 Apr FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 184.173.146.3 Dst ip: 81.xxxxxxx Type: Destination Unreachable Code: Port Unreacheable
08:48:12 28 Apr IDS scan parser : udp port scan: 213.172.34.234 scanned at least 20 ports at 81.xxxxxxxxx. (1 of 1) : 213.172.34.234 81.158.210.129 0056 UDP 61483->50430
08:09:24 28 Apr FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 119.199.114.60 Dst ip:81. xxxxxxxType: Destination Unreachable Code: Host Unreacheable
06:03:28 28 Apr IDS proto parser : tcp invalid urgent offset (1 of 15) : 192.xx.66 126.233.94.94 0052 TCP 53766->443 [.FA.U.] seq 3918315724 ack 248545603 win 16383
06:00:22 28 Apr IDS proto parser : tcp invalid urgent offset (1 of 1) : 192.xx.66 126.233.94.94 0052 TCP 53766->443 [.FA.U.] seq 3918315724 ack 248545602 win 16383


Thanks Guys

BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:12:41 AM

Posted 03 May 2012 - 10:00 PM

Was this your question and the final reply at Norton Forum ? ?
You appear to have thanked them and accepted the answer given there ? ?

Norton Community : Norton Users Discussion Forum
04-28-2012 08:08 AM
Very grateful if
1)anyone could explain what these messages mean &
2)perhaps help me understand what thsi Ipod is trying to do - without anyone using it?.
3)Also, should 360 be picking up these attempts at connection at all - I cant see any such warnings in Norton?. Appreciate anyones help

04-29-2012 11:35 AM
Yes, exactly (referring to the port scans). Your original post mentioned that these were being logged on your router, rather than by Norton.
So what that means is that your router is sitting there, as a live device at the end of your incoming broadband connection. So anything that's pinging for live devices at it's IP address is going to get a response.
But since you have any connections on your side of that router either physically or electronically disabled overnight, nothing except your router is being exposed. ....

Note that many of us do belong to several forums and use the contacts there to help us with our answers -

Regards -
EDIT - If I am wrong, please post back -

Edited by noknojon, 03 May 2012 - 10:01 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users