PDA

View Full Version : Stateful Packet Inspection

Delgado
October 15th, 2006, 05:30 PM
I am using a Belkin Router with built in firewall. The firewall has SPI built into the router. LooknStop works fine with the router, but should I switch on SPI in LooknStop as well, or will that mess up my Router working in conjunction with LooknStop?

I have not had to set up any extra rules, at the moment, LnS just worked ok.

;D
james246
October 15th, 2006, 05:52 PM
The SPI in Look"n" Stop will work fine with the Belkin router - you will get the occasional log from L"n"S statefull inspection but this is nothing to worry about.
Delgado
October 16th, 2006, 04:53 AM
-{ Quote: "The SPI in Look"n" Stop will work fine with the Belkin router - you will get the occasional log from L"n"S statefull inspection but this is nothing to worry about." }-


Thanks for reply-I switched SPI on in LooknStop, and my uTorrent stopped downloading anything!

Ive got the uTorrent rule set up and it all works except when I activate SPI in LooknStop.

Maybe if I leave SPI off, I will still be protected enough, any ideas anyone? Thanks.

:) :)
farmerlee
October 16th, 2006, 06:59 AM
From what i understand the SPI option just records unknown connections into the log. I just leave it off as i rarely ever check the log.
Delgado
October 16th, 2006, 03:54 PM
-{ Quote: "From what i understand the SPI option just records unknown connections into the log. I just leave it off as i rarely ever check the log." }-

Thanks for reply-yes that is what I have done, Im also using Phantoms ruleset.

:) :)
waiwai
October 20th, 2006, 07:01 PM
It seems I have the same problem, once i download P2P file by BitSpirit 3.x as well as open TCP SPI.

My download speed drop like hell..............I wonder if its save to close.
test4
October 24th, 2006, 03:36 AM
Same problem here.
So, does anyone know how necessary SPI is? Does disabling it reduce safety significantly?
fred22
October 24th, 2006, 07:54 AM
theres no problem with SPI enabled+Utorrent on my end..not using any router though
farmerlee
October 24th, 2006, 10:03 AM
-{ Quote: "Same problem here.
So, does anyone know how necessary SPI is? Does disabling it reduce safety significantly?" }-
Well all it does is monitor packets and verifies that they belong to an active connection, if not it will display an alert in the log. If you regularly check your logs then its helpful to have it enabled.