VectorLinux

Please login or register.

Login with username, password and session length
Advanced search  

News:

Visit our home page for VL info. For support and documentation, visit the Vector Linux Knowledge Center or search the Knowledge Center and this Forum using the search box above.

Author Topic: Worrysome router log messages  (Read 4477 times)

gamfa

  • Vectorite
  • ***
  • Posts: 245
Worrysome router log messages
« on: March 17, 2009, 04:41:56 pm »

Can someone tell me if these messages from my router log are something I need to worry about.....


Quote
[INFO]   Tue Mar 17 17:24:53 2009   Blocked incoming TCP packet from 221.192.199.36:12200 to 70.194.3.114:9090 as RST received but there is no active connection
[INFO]   Tue Mar 17 17:24:27 2009   Blocked incoming TCP connection request from 221.192.199.36:12200 to 70.194.3.114:9090
[INFO]   Tue Mar 17 17:19:25 2009   Blocked incoming TCP packet from 221.192.199.36:12200 to 70.194.3.114:9090 as RST received but there is no active connection
[INFO]   Tue Mar 17 17:19:10 2009   Blocked incoming TCP connection request from 221.192.199.36:12200 to 70.194.3.114:9090

[INFO]   Tue Mar 17 17:29:14 2009   Blocked incoming TCP connection request from 205.155.233.167:6000 to 70.194.3.114:8080
[INFO]   Tue Mar 17 17:28:53 2009   Blocked incoming TCP connection request from 201.222.113.89:24856 to 70.194.3.114:30432

[INFO]   Tue Mar 17 17:47:09 2009   Blocked incoming TCP packet from 219.153.53.155:12200 to 70.194.3.114:80 as RST received but there is no active connection
[INFO]   Tue Mar 17 17:46:39 2009   Blocked incoming TCP connection request from 219.153.53.155:12200 to 70.194.3.114:80

[INFO]   Tue Mar 17 15:21:50 2009   Blocked incoming TCP packet from 83.234.227.9:65078 to 75.204.46.196:11108 as RST received but there is no active connection
[INFO]   Tue Mar 17 15:21:21 2009   Blocked incoming TCP connection request from 83.234.227.9:65078 to 75.204.46.196:11108

[INFO]   Tue Mar 17 15:09:54 2009   Blocked incoming TCP packet from 72.13.224.34:23863 to 75.204.46.196:5900 as RST received but there is no active connection
[INFO]   Tue Mar 17 15:09:23 2009   Blocked incoming TCP connection request from 72.13.224.34:23863 to 75.204.46.196:5900


None of the addresses are part of my net.
Logged
"Don't tell my cattle I have leather seats in my truck"

"I never let schooling stand in the way of my education"...Mark Twain

wcs

  • Packager
  • Vectorian
  • ****
  • Posts: 1144
Re: Worrysome router log messages
« Reply #1 on: March 17, 2009, 06:19:50 pm »

I get quite a lot of those as well. As long as they're blocked, I don't really worry... It means the router is doing its job. It always amazes me how frequent these are.

Maybe you can check if there are any repeating offenders, and block the IPs altogether.

If you're concerned, you can make sure you have iptables setup to block everything you don't need in your computers, and/or monitor your incoming connections.

Firestarter can also show what connections it blocks when it's running in the tray. I personally like to use conky to display outgoing and incoming connections on the root window, so I can see what's going on in real time.
Logged