sslug-teknik team mailing list archive

[Martin Nissen <linux@xxxxxxxxxxxxx>]

Har en D-Link DIR-635 router som jeg bruger til WLAN.
Den sidder bag en anden firewall og er skærmet for alt trafik der fra.
Jeg bruger WPA2-PSK med en 63 tegns kode og MAC filter.

Nu undrer jeg mig så over at loggen viser blocked TCP pakker mellem 2 
eksterne IP, som skulle være i Fairport New York!!!
Jeg kan heller ikke finde et mønster i det.

/Martin

[INFO] Tue Feb 10 16:03:07 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:4115 as SYN:ACK is not allowed in state NO
[INFO] Tue Feb 10 15:59:23 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:4102 as SYN:ACK is not allowed in state NO
[INFO] Tue Feb 10 14:16:45 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:2310 as SYN:ACK is not allowed in state NO
[INFO] Tue Feb 10 12:26:07 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:3088 as SYN:ACK is not allowed in state NO
[INFO] Tue Feb 10 12:21:35 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:3036 as SYN:ACK is not allowed in state NO
[INFO] Tue Feb 10 12:15:44 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:3029 as SYN:ACK is not allowed in state NO
[INFO] Tue Feb 10 12:09:01 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:2977 as SYN:ACK is not allowed in state NO
[INFO] Tue Feb 10 12:06:51 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:2912 as SYN:ACK is not allowed in state NO
[INFO] Tue Feb 10 11:48:56 2009 Blocked incoming TCP packet from 
63.253.15.40:80 to 63.253.15.44:2808 as SYN:ACK is not allowed in state NO