Za 20min 354 nízkých útoků v Kerio Personal Firewall = ICMP

[Slimák]

Zdravim všechny.

Dnes jsem se po instalaci ADSL trochu zděsil.

Když jsem se díval na přehledy útoků v Kerio Personal Firewall, tak jich tam mám za chviličku 354 nízkejch. Docela mě to děsí

Když jsem měl dial, tak to bylo max. do 5 za 2 hodiny. Nic jsem nepřenastavoval s přechodem na ADSL. Jen jsem zadal, že ta síť není důvěryhodná.

Tady je malý výpis.
[10/Jun/2004 22:53:18] "Ids" action = permitted, raddr = 62.111.168.146, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 22:53:18] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 22:53:18] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 22:53:20] "Ids" action = permitted, raddr = 62.111.168.146, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 22:53:20] "Ids" action = permitted, raddr = 62.111.168.146, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 22:53:20] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 22:53:20] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 22:58:06] "Ids" action = permitted, raddr = 62.111.168.146, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 22:58:08] Last message repeated 4 times
[10/Jun/2004 23:00:13] "Ids" action = permitted, raddr = 62.111.168.146, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:15] Last message repeated 8 times
[10/Jun/2004 23:00:24] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:25] Last message repeated 4 times
[10/Jun/2004 23:00:25] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:27] Last message repeated 4 times
[10/Jun/2004 23:00:27] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:28] Last message repeated 8 times
[10/Jun/2004 23:00:28] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:29] Last message repeated 10 times
[10/Jun/2004 23:00:29] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:30] Last message repeated 10 times
[10/Jun/2004 23:00:30] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:31] Last message repeated 10 times
[10/Jun/2004 23:00:31] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:32] Last message repeated 10 times
[10/Jun/2004 23:00:32] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:33] Last message repeated 10 times
[10/Jun/2004 23:00:33] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:34] Last message repeated 10 times
[10/Jun/2004 23:00:34] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:35] Last message repeated 10 times
[10/Jun/2004 23:00:35] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:36] Last message repeated 10 times
[10/Jun/2004 23:00:36] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = in, class = 'misc-activity', priority = low
[10/Jun/2004 23:00:37] Last message repeated 10 times
[10/Jun/2004 23:00:37] "Ids" action = permitted, raddr = 82.51.95.21, msg = '"ICMP Destination Unreachable (Port Unreachable)"', url = '', direc = i

[jedik]

Patrne imho nekdo obycejne pinguje (treba Sasser).

[Jezevec]

Heh, jestli dobre chnapu ty hlasky, tak ten utok si delas sam . Tobe chodi odpoved od toho kompu v inetu, ze port neni dostupnej a kerio ti to hlasi, paac to de pres ICMP protokol.

tohle nei zadnej utok, az ti nekdo zautoci na komp, tak to ani nepoznas

[Slimák]

Heh, jestli dobre chnapu ty hlasky, tak ten utok si delas sam . Tobe chodi odpoved od toho kompu v inetu, ze port neni dostupnej a kerio ti to hlasi, paac to de pres ICMP protokol.

tohle nei zadnej utok, az ti nekdo zautoci na komp, tak to ani nepoznas

Ouvej, jsem to ale lama

[Slimák]

Jezevče, měl bych na tebe ještě jeden dotaz.

Používám to zmíněný kerio. ADSL modem konfiguruju přes web rozhraní. Kerio mi zahlásilo, abych nastavil důvěryhodnost připojení mé síťovky, která je připojená na ten modem. Mám nastavit důvěryhodné a nebo nedůvěryhodné (internet)?

Je to tohle:

1.
10.0.0.0/255.255.255.0
3Com Etherlink bla bla bla - packet scheduler miniport

A další:
2. Loopback 127.0.0.1 - adaptér neurčený

Díky

[Jezevec]

Mno to zalezi na tobe . Kerio posledni dobou stoji cim dal vic naprd. Nejde to poradne nastavit takze si stejne moc nevyberes. Radsi dej neduveryhodny.

[Slimák]

Mno to zalezi na tobe . Kerio posledni dobou stoji cim dal vic naprd. Nejde to poradne nastavit takze si stejne moc nevyberes. Radsi dej neduveryhodny.

Tak jsem to tak dal, ale nemůžu zase procházet místní síť. Dostat se k bráchovi na PC

[KocuR]

<OT="jak vypada DoS utok">
Neni to tak davno co jsme na kolejich jeden zazili - nekolik milionu paketu za vterinu. Hadam ze to byl sasser, objevilo se to asi 3 dny pred tim, nez se na nej MS vydal zaplaty
</OT>

[bananalama]

Mno to zalezi na tobe . Kerio posledni dobou stoji cim dal vic naprd. Nejde to poradne nastavit takze si stejne moc nevyberes. Radsi dej neduveryhodny.

Tak jsem to tak dal, ale nemůžu zase procházet místní síť. Dostat se k bráchovi na PC

Neviem ako v Keriu, ale v Nortone aj v Outposte sa dá nastaviť konkrétna adresa(bratové PC) ako "trusted"(dôveryhodný) PC. Ale potom môže zaútočiť tvoj brat.