Wilders Security Forums  

Go Back   Wilders Security Forums > Official ESET Support Forum > ESET Home Users Products Forum > ESET Smart Security
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old March 27th, 2009, 06:10 AM
stratoc
 
Posts: n/a
Default dns poisoning attack detected

seeing as this looks like it's with us forever, what does it mean exactly? support told me to disable it in set up, but i would rather leave it on.
But every other day or so i get this in my firewall log i know it's something to do with my router ping. What does the firewall log do, is it telling my smart has taken action? has it noticed and ignored it? what does it mean exactly as this does not seem to effect my pc in anyway. or should i disable it in set up?
thanks.
  #2  
Old March 27th, 2009, 03:26 PM
funkydude's Avatar
funkydude funkydude is offline
Incredibly Massive Poster
 
Join Date: Apr 2004
Posts: 6,000
Default Re: dns poisoning attack detected

I'm more inclined to say it means absolutely nothing. I think ESET's firewall just digs it's own hole when it comes to logging too much.
__________________
OpenDNS with DNSCrypt

SSD: Windows 8 Pro x64 | IE10 (Enhanced Protected Mode) & Fanboy's TPLs
HDD: Xubuntu 12.04 LTS (x64) | Firefox: ABP(Fanboy's list) & HTTPS Everywhere
  #3  
Old March 27th, 2009, 04:43 PM
stratoc
 
Posts: n/a
Default Re: dns poisoning attack detected

hi, that's what i mean, why and what is it telling me? think you're right, i'll leave it enabled.
  #4  
Old March 27th, 2009, 04:48 PM
DarrenDavisLeeSome's Avatar
DarrenDavisLeeSome DarrenDavisLeeSome is offline
Frequent Poster
 
Join Date: Mar 2009
Location: Riverside, CA U.S.A
Posts: 315
Default Re: dns poisoning attack detected

I spent a great deal of time hacking back and forth with ESET Tech Support on the ARP/DNS Cache poisoning attack logs with ESS 3.0. Most of the attacks were coming from my router. They were almost alway in UDP Protocal. Even more odd was that they tended to happened whenever I was going to a secure server. I was also getting a few here and there from my ISP Tech Support Secured Chats. Funny, all SSL Protocals are supposed to be in TCP, not UDP.

I tightened up the router settings quite a bit like putting all the systems on Static IP. Not sure if it helped. I stopped getting as many of these ARP/DNS Cache Poising Attack detections. However, after I installed ESS 4.0, it was like I was getting them all over again in droves.

Maybe it's just because my router is so old and behind the times. The manufacturer isn't even supporting it anymore. Hasn't been any firmware updates for 2 years.
  #5  
Old March 27th, 2009, 04:51 PM
stratoc
 
Posts: n/a
Default Re: dns poisoning attack detected

mines less than a year old, i sometimes wonder if firewalls are more trouble than they're worth. don't use one on my other 2 pc's.
 

Wilders Security Forums > Official ESET Support Forum > ESET Home Users Products Forum > ESET Smart Security « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 11:40 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums