Announcement

Collapse
No announcement yet.

Router advice needed -DoS attack?

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Router advice needed -DoS attack?

    I've noticed that my router says stuff like this in the Log section:

    Tue, 2004-08-24 19:24:47 - TCP Packet - Source:82.141.73.236,2734 Destination:- [DOS]
    Tue, 2004-08-24 19:25:51 - TCP Packet - Source:198.37.26.136,62732 Destination:- [DOS]
    Tue, 2004-08-24 19:25:55 - TCP Packet - Source:69.119.248.244,3522 Destination: - [DOS]
    Tue, 2004-08-24 19:25:57 - TCP Packet - Source:81.207.120.229,35519 Destination: - [DOS]
    (I've blanked out the destination IP address -presume it's mine- in a bout of paranoia)

    The router is set up to log "Known DoS attacks and Port Scans", and I guess the above are DoS attacks. I have a Netgear router that seems to have a Firewall, use XP Firewall and keep a virus checker updated. Are these "attacks" something to worry about, or are they completely normal?

    #2
    Yeah, have a netgear too. Get those all day long, though some ISPs seem more popular than others, it would appear.

    Not to worry.

    Comment


      #3
      Thanks for that. Any idea what are they though?

      Comment


        #4
        I think its just people randomly scan ports on known IP (as most isp's ranges are known) to see if there are any open ports to expliot. If your systems locked down then you should be fine.

        Comment


          #5
          I think my set up is locked down, but to be honest I wouldn't know how secrure it was. My Router says it has a firewall and I've left it at the default settings. I've also turned the (probably rubbush) XP firewall on.

          Experience tells me that the default is usually not good enough, so shoudl I do more?

          Comment


            #6
            you could look at the shields up website to test how secure you are, cant remember the exact address but type it into google and it should be found.

            Comment


              #7
              I've already run it using that Netgear (assume you're on the DG834), passes. You're just seeing logs of crap it's blocking. I've had a fresh XP online behind it and it didn't get infected with blaster or any of that tosh you're seeing in the logs there. Compare that to a fresh XP I put online sans firewall which lasted 15mins.

              Comment

              Working...