View Full Version : Firewall log messages
bitmap
January 27th, 2008, 08:43 PM
Keep getting heaps of these in the firewall log.
197257
Any idea what is causing them and is there a setting I need to tweek?
Thanks.
bitmap
January 29th, 2008, 02:38 AM
I guess I didn't give much to go on so a bit more info now:
My rules config is as follows-
197277
Any problems here? I'm a bit nervous about the highlighted one. Hopefully any system generated rules are o/k?
I'm a home user with only the one computer. During setup, I selected strict protection from the options below.
197278
Could this be the problem? or maybe communications with the ADSL modem?
Who was it that said ignorance is bliss >:(
COSMO26
January 29th, 2008, 04:53 AM
FWIW, I'm a single desktop Automatic FW setting/Strict and my log looks like yours starting yesterday morning and into today.
GaryRW
January 29th, 2008, 12:19 PM
I think the log options for troubleshooting are turned on. Check under "IDS and Advanced Options"
-{ Quote: "Keep getting heaps of these in the firewall log.
197257
Any idea what is causing them and is there a setting I need to tweek?
Thanks." }-
bitmap
January 30th, 2008, 02:20 AM
Ok - unchecking the "Log all blocked connections" has stopped these from being generated. Thanks for the heads-up.
Still wondering what persistent little program is causing them though....
lych
January 30th, 2008, 02:43 AM
-{ Quote: "Keep getting heaps of these in the firewall log.
Any idea what is causing them and is there a setting I need to tweek?
Thanks." }-
Well, IP addresses in the 192.168.x.x range are reserved for local area networks (i.e. you home network) and port 138 is a normal netbios port used for Windows networking. The No Usable Rule Found event log has been discussed here before (click here (http://www.wilderssecurity.com/showthread.php?p=1130643#post1130643)).
Basically, these entries are normal and can be ignored as they are related to Microsoft Networking.
bitmap
January 30th, 2008, 04:12 AM
Thanks lych.
Had actally just found that thread too - should have searched the forum earlier. (I did look but just didn't use the search tool properly).
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums