Help on look 'n' stop rules...

Discussion in 'LnS English Forum' started by lorife, Sep 26, 2005.

Thread Status:
Not open for further replies.
  1. lorife

    lorife Registered Member

    Joined:
    Sep 24, 2005
    Posts:
    27
    ok I tried with another guy..this is the log:

    ----------
    10-20-05,22:41:18 D-847 'TCP : SYN flag alone ! ' 82.60.125.140 TCP Ports Dest:3410 Src:1965
    10-20-05,22:41:25 D-848 'TCP : SYN flag alone ! ' 130.85.248.119 TCP Ports Dest:6348 Src:2954
    10-20-05,22:41:28 D-849 'TCP : SYN flag alone ! ' 130.85.248.119 TCP Ports Dest:6348 Src:2954
    10-20-05,22:41:56 D-850 'All other packets ' 192.168.100.1 IGMP Data:17 100 238 155
    10-20-05,22:42:56 D-851 'All other packets ' 192.168.100.1 IGMP Data:17 100 238 155
    10-20-05,22:43:56 D-852 'All other packets ' 192.168.100.1 IGMP Data:17 100 238 155
    10-20-05,22:44:26 D-853 '+ Port Scan? + ( Echo 8,' 82.78.120.218 ICMP Type:8 Code:0
    10-20-05,22:44:28 D-854 'TCP : SYN flag alone ! ' 213.140.22.67 TCP Ports Dest:1313 Src:16533
    10-20-05,22:44:31 D-855 'TCP : SYN flag alone ! ' 213.140.22.67 TCP Ports Dest:1313 Src:16533
    10-20-05,22:44:37 D-856 'TCP : SYN flag alone ! ' 213.140.22.67 TCP Ports Dest:1313 Src:16533
    10-20-05,22:44:56 D-857 'All other packets ' 192.168.100.1 IGMP Data:17 100 238 155
    10-20-05,22:45:57 D-858 'All other packets ' 192.168.100.1 IGMP Data:17 100 238 155
    10-20-05,22:46:31 D-859 'TCP : 139 netbios-ssn ' 82.60.119.122 TCP Ports Dest:139 Src:3370
    10-20-05,22:46:34 D-860 'TCP : 139 netbios-ssn ' 82.60.119.122 TCP Ports Dest:139 Src:3370
    --------------

    his Ip was 213.140.22.67
    but I am sorry to say this...it's still very slow..

    I don't know if it's important, but that guy was behind a cable connection (Fastweb - 10Mb fiber optic) , which uses NAT...and I am a dial up ADSL user..
     
    Last edited: Oct 20, 2005
  2. lorife

    lorife Registered Member

    Joined:
    Sep 24, 2005
    Posts:
    27
    help...
     
  3. lorife

    lorife Registered Member

    Joined:
    Sep 24, 2005
    Posts:
    27
    Phantom are you still there? o_O
     
  4. lorife

    lorife Registered Member

    Joined:
    Sep 24, 2005
    Posts:
    27
    O'well..
     
  5. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,353
    Location:
    France
    With the standard or enhanced ruleset, do you have the same issue ?

    Frederic
     
  6. lorife

    lorife Registered Member

    Joined:
    Sep 24, 2005
    Posts:
    27
    I have to try that...I'll let you know! Thanks for the answer btw.. :)
     
  7. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,726
    Location:
    Canada
    It’ll be of an issue regardless what rule-set because of a particular type of rule, a critical rule and should not be removed or disabled, this setup we have now with MSN requires a specific TCP port range to be permitted in through which I do not support. I recommend quickly creating a ‘server rule’ using Log menu on blocked packet.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.