[newbie] OT: Port Scan?

2004-02-10 Thread Chris Ruzin
I've got a D-Link DI-604 router for my small home network. I have it automatically send me the log file when it reaches a certain size. In the last few days, I've been getting a copy of a the log file several times a day. And it's always the same thing: Feb/09/2004 22:06:32 Drop TCP packet

Re: [newbie] OT: Port Scan?

2004-02-10 Thread Raffaele Belardi
You read it like this: for example the first line is telling you that a machine with ip address 66... is trying to connect to your machine (ip address 162) on TCP port 8980. The firewall is applying a default behavior of denying the connection. The log file shows several ICMP packets,

Re: [newbie] OT: Port Scan?

2004-02-10 Thread Chris Ruzin
Wow! Thanks for the quick response and great advice. I've changed my router to drop the packets instead of deny them. Hopefully that will deter future things like this from occurring. As an aside, one thing I've also noticed in the last few days with my network is that my DSL has gone from

Re: [newbie] OT: Port Scan?

2004-02-10 Thread Allen/gore/SlackWareWolf
Hmm, you should have this DROP packets. Denying allows them to see you're at least up. dropping keeps them guessing. I have this same router. You should set it up for dropping packets insted of denying. :) -- __ We Are 138 http://www.suse.com

Re: [newbie] OT: Port Scan?

2004-02-10 Thread Allen/gore/SlackWareWolf
Damn, sorry. Didn't see someone already told you to just drop them. Oh well, it's almost 6 AM and I'v had a whole 5 ours sleep in 3 days. -- __ We Are 138 http://www.suse.com http://www.slackware.org http://www.bsd.org http://www.daemonnews.org/

Re: [newbie] OT: Port Scan?

2004-02-10 Thread Tom Brinkman
On Tuesday 10 February 2004 03:19 am, Chris Ruzin wrote: As an aside, one thing I've also noticed in the last few days with my network is that my DSL has gone from an average speed of 75k/sec to 150k/sec.  That's T1 speed just about, isn't it?  I haven't upgraded my subscription or anything,