VectorLinux
July 26, 2014, 04:52:51 am *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Visit our home page for VL info. To search the old message board go to http://vectorlinux.com/forum1. The first VL forum is temporarily offline until we can find a host for it. Thanks for your patience.
 
Now powered by KnowledgeDex.
   Home   Help Search Login Register  
Please support VectorLinux!
Pages: [1]
  Print  
Author Topic: Worrysome router log messages  (Read 4120 times)
gamfa
Vectorite
***
Posts: 245



« on: March 17, 2009, 03:41:56 pm »

Can someone tell me if these messages from my router log are something I need to worry about.....


Quote
[INFO]   Tue Mar 17 17:24:53 2009   Blocked incoming TCP packet from 221.192.199.36:12200 to 70.194.3.114:9090 as RST received but there is no active connection
[INFO]   Tue Mar 17 17:24:27 2009   Blocked incoming TCP connection request from 221.192.199.36:12200 to 70.194.3.114:9090
[INFO]   Tue Mar 17 17:19:25 2009   Blocked incoming TCP packet from 221.192.199.36:12200 to 70.194.3.114:9090 as RST received but there is no active connection
[INFO]   Tue Mar 17 17:19:10 2009   Blocked incoming TCP connection request from 221.192.199.36:12200 to 70.194.3.114:9090

[INFO]   Tue Mar 17 17:29:14 2009   Blocked incoming TCP connection request from 205.155.233.167:6000 to 70.194.3.114:8080
[INFO]   Tue Mar 17 17:28:53 2009   Blocked incoming TCP connection request from 201.222.113.89:24856 to 70.194.3.114:30432

[INFO]   Tue Mar 17 17:47:09 2009   Blocked incoming TCP packet from 219.153.53.155:12200 to 70.194.3.114:80 as RST received but there is no active connection
[INFO]   Tue Mar 17 17:46:39 2009   Blocked incoming TCP connection request from 219.153.53.155:12200 to 70.194.3.114:80

[INFO]   Tue Mar 17 15:21:50 2009   Blocked incoming TCP packet from 83.234.227.9:65078 to 75.204.46.196:11108 as RST received but there is no active connection
[INFO]   Tue Mar 17 15:21:21 2009   Blocked incoming TCP connection request from 83.234.227.9:65078 to 75.204.46.196:11108

[INFO]   Tue Mar 17 15:09:54 2009   Blocked incoming TCP packet from 72.13.224.34:23863 to 75.204.46.196:5900 as RST received but there is no active connection
[INFO]   Tue Mar 17 15:09:23 2009   Blocked incoming TCP connection request from 72.13.224.34:23863 to 75.204.46.196:5900


None of the addresses are part of my net.
Logged

"Don't tell my cattle I have leather seats in my truck"

"I never let schooling stand in the way of my education"...Mark Twain
wcs
Packager
Vectorian
****
Posts: 1144


« Reply #1 on: March 17, 2009, 05:19:50 pm »

I get quite a lot of those as well. As long as they're blocked, I don't really worry... It means the router is doing its job. It always amazes me how frequent these are.

Maybe you can check if there are any repeating offenders, and block the IPs altogether.

If you're concerned, you can make sure you have iptables setup to block everything you don't need in your computers, and/or monitor your incoming connections.

Firestarter can also show what connections it blocks when it's running in the tray. I personally like to use conky to display outgoing and incoming connections on the root window, so I can see what's going on in real time.
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!