PDA

View Full Version : Firewall log messages


bitmap
January 27th, 2008, 08:43 PM
Keep getting heaps of these in the firewall log.

197257

Any idea what is causing them and is there a setting I need to tweek?

Thanks.

bitmap
January 29th, 2008, 02:38 AM
I guess I didn't give much to go on so a bit more info now:

My rules config is as follows-

197277

Any problems here? I'm a bit nervous about the highlighted one. Hopefully any system generated rules are o/k?

I'm a home user with only the one computer. During setup, I selected strict protection from the options below.

197278

Could this be the problem? or maybe communications with the ADSL modem?

Who was it that said ignorance is bliss >:(

COSMO26
January 29th, 2008, 04:53 AM
FWIW, I'm a single desktop Automatic FW setting/Strict and my log looks like yours starting yesterday morning and into today.

GaryRW
January 29th, 2008, 12:19 PM
I think the log options for troubleshooting are turned on. Check under "IDS and Advanced Options"

-{ Quote: "Keep getting heaps of these in the firewall log.

197257

Any idea what is causing them and is there a setting I need to tweek?

Thanks." }-

bitmap
January 30th, 2008, 02:20 AM
Ok - unchecking the "Log all blocked connections" has stopped these from being generated. Thanks for the heads-up.

Still wondering what persistent little program is causing them though....

lych
January 30th, 2008, 02:43 AM
-{ Quote: "Keep getting heaps of these in the firewall log.

Any idea what is causing them and is there a setting I need to tweek?

Thanks." }-
Well, IP addresses in the 192.168.x.x range are reserved for local area networks (i.e. you home network) and port 138 is a normal netbios port used for Windows networking. The No Usable Rule Found event log has been discussed here before (click here (http://www.wilderssecurity.com/showthread.php?p=1130643#post1130643)).

Basically, these entries are normal and can be ignored as they are related to Microsoft Networking.

bitmap
January 30th, 2008, 04:12 AM
Thanks lych.

Had actally just found that thread too - should have searched the forum earlier. (I did look but just didn't use the search tool properly).