Your forum username:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Welcome to Sky User - The Unofficial Support Forum for everything Sky! - Proudly helping over 65k members.


    Advertisement

    Results 1 to 3 of 3

    D LInk Router Logs Question

    This is a discussion on D LInk Router Logs Question within the Sky Router forums, part of the Sky Broadband help category; Hi Been with Sky BB for nearly 3 years. Originally had a DG934 but after recent issues, Sky have provided ...

    1. #1
      Seville's Avatar
      Seville is offline Sky User Member
      Exchange:
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR101
      Sky TV: Sky+
      Join Date
      Nov 2007
      Posts
      74
      Thanks
      0
      Thanked 1 Time in 1 Post

      D LInk Router Logs Question

      Hi

      Been with Sky BB for nearly 3 years. Originally had a DG934 but after recent issues, Sky have provided a shiny new D Link 2640.

      My question is when viewing the logs, there are regular messages of

      kernel: Intrusion -> IN=pppoa0 OUT= MAC= SRC=41.237.100.199 DST=XXX.XXX.XXX.XXX LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=36393 DF PROTO=TCP SPT=2629 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0


      XXX being my Internet address. The source IP differs each time, but they are all hitting my IP address over port 23(telnet). Can someone tell me whether the log is simply saying this Source has tried to Telnet or has actually managed to breach the firewall. At least on the Netgear it told you if it was blocked and what time it happened.

      As I say the logging doesn't specify times so its hard to determine when it has happened.

      Doing an nslookup on this particular address shows the host name is originating from Egypt

      Anyone any ideas


    2. Advertisement
    3. #2
      Isitme's Avatar
      Isitme is offline Sky User Moderator
      Exchange: Bannockburn
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR102
      Sky TV: Sky+ HD
      Join Date
      Dec 2006
      Location
      Central Scotland
      Posts
      34,131
      Thanks
      64
      Thanked 1,641 Times in 1,602 Posts

      Re: D LInk Router Logs Question

      I am pretty sure it has been blocked. If it had got through the router I don't think you would see anything in the log at all. To be on the safe side, change the router admin password to something unique to you and turn off Respond to Ping. Responding to ping just lets hackers know that something is at the address they are pinging.

      TomD


      Please note the views and recommendations in my posts are my own and in no way reflect the views of SkyUser.


      Useful Utilites

      http://www.nirsoft.net/utils/wifi_information_view.html/ TCPOptimiser /Test Socket

      Note - When downloading always select the Custom install or you will end up with stuff you don't want.





    4. #3
      Seville's Avatar
      Seville is offline Sky User Member
      Exchange:
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR101
      Sky TV: Sky+
      Join Date
      Nov 2007
      Posts
      74
      Thanks
      0
      Thanked 1 Time in 1 Post

      Re: D LInk Router Logs Question

      I agree - 1st thing I did was change the password and switch ping off. With the netgear, it would say "rule match" or something like that. It may just be the wording of it as I dont have this port opened or any for that matter. The logging could be better and clearer in what it is logging on.

     

     

    Tags for this Thread

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  
    SkyUser - Copyright © 2006-2017. SatDish and NewsreadeR | SkyUser is in no way affiliated with Sky Broadband / BSkyB
    RIPA NOTICE: NO CONSENT IS GIVEN FOR INTERCEPTION OF PAGE TRANSMISSION