dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
5036
StarOcean
join:2005-05-06
Mississauga, ON

StarOcean

Member

802.11g Wireless Router Firewall help.

For my security log, I got the following:
"Firewall log:
Wed May 25 20:37:51 2005 1 Blocked by DoS protection 64.231.242.182
Wed May 25 20:37:51 2005 1 Blocked by DoS protection 64.231.248.60
Wed May 25 20:37:54 2005 1 Blocked by DoS protection 64.231.242.182
Wed May 25 20:37:56 2005 1 Blocked by DoS protection 209.213.252.230
Wed May 25 20:37:58 2005 1 Blocked by DoS protection 64.231.238.157
Wed May 25 20:37:59 2005 1 Blocked by DoS protection 209.213.252.230
Wed May 25 20:38:16 2005 1 Blocked by DoS protection 64.231.161.172
Wed May 25 20:38:17 2005 1 Blocked by DoS protection 64.231.117.28
Wed May 25 20:38:20 2005 1 Blocked by DoS protection 64.231.117.28
Wed May 25 20:38:21 2005 1 Blocked by DoS protection 209.213.252.230
Wed May 25 20:38:22 2005 1 Blocked by DoS protection 64.231.112.193
Wed May 25 20:38:24 2005 1 Blocked by DoS protection 209.213.252.230
Wed May 25 20:38:25 2005 1 Blocked by DoS protection 64.231.112.193
Wed May 25 20:38:33 2005 1 Blocked by DoS protection 64.231.220.47
Wed May 25 20:39:04 2005 1 Blocked by DoS protection 64.231.238.157
Wed May 25 20:39:07 2005 1 Blocked by DoS protection 64.231.238.157
Wed May 25 20:39:14 2005 1 Blocked by DoS protection 212.146.53.61
Wed May 25 20:39:17 2005 1 Blocked by DoS protection 212.146.53.61
Wed May 25 20:39:22 2005 1 Blocked by DoS protection 192.168.0.111
Wed May 25 20:39:23 2005 1 Blocked by DoS protection 212.146.53.61
Wed May 25 20:39:29 2005 1 Blocked by DoS protection 64.231.119.77
Wed May 25 20:39:30 2005 1 Blocked by DoS protection 218.72.115.240
Wed May 25 20:39:32 2005 1 Blocked by DoS protection 64.231.119.77
Wed May 25 20:39:33 2005 1 Blocked by DoS protection 218.72.115.240
Wed May 25 20:39:59 2005 1 Blocked by DoS protection 64.231.160.187
Wed May 25 20:40:02 2005 1 Blocked by DoS protection 64.231.160.187
Wed May 25 20:40:02 2005 1 Blocked by DoS protection 83.34.29.47
Wed May 25 20:40:03 2005 1 Blocked by DoS protection 64.231.34.168
Wed May 25 20:40:05 2005 1 Blocked by DoS protection 64.231.34.168
Wed May 25 20:40:08 2005 1 Blocked by DoS protection 83.34.29.47
Wed May 25 20:40:11 2005 1 Blocked by DoS protection 162.84.232.169
Wed May 25 20:40:14 2005 1 Blocked by DoS protection 162.84.232.169 "

From my knowledge, DoS attacks are only for attacking servers, and what is this rapid attacking? It is hard to believe those results. I am using speedsteam 5200 in bridge mode (PPPoE Bell Canada high speed).
StarOcean

StarOcean

Member

Oh forgot to mention I am using this router »catalog.belkin.com/IWCat ··· d=136493
Belkin 802.11g Wireless DSL/Cable Gateway Router
OHN
join:2003-02-05
Appleton, WI

1 edit

OHN to StarOcean

Member

to StarOcean
You did notice most are from your ISP right?

The stupid Belkin router thinks it is being attacked by your ISP. I had the same thing, every single one of the IP was from my ISP.

I think that sucks and you cannot stop it from happening. My workaround was to place my TA in front of the router. No more DoS attacks. Well not until I put a PC on my network with over 150 viruses. At that point, I saw DoS on my logs. This time it made sense though.
BengalMan
join:2005-02-26
Australia

BengalMan to StarOcean

Member

to StarOcean
I used to get entries like that when I was using the Belkin Pre-N router.

I beleive that the router is misconfigured and mistakenly sees DHCP broadcasts coming in from your ISPs LAN as Denial of Service attacks.

Poor Firewall logging settings. Which of course is not the fault of the end user.

I hope Belkin fix that in a new release of the firmware.