1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Kerio

Discussion in 'All Other Software' started by Deke40, Jan 16, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. Deke40

    Deke40 Thread Starter

    Joined:
    Jun 27, 2002
    Messages:
    6,077
    Here is my Kerio log file. Why are there all these blocked packets from what looks like Tech Guys(Cermak)?

    1,[16/Jan/2003 06:05:02] Rule 'Packet to unopened port received': Blocked: In TCP, 213.197.7.38:2267->localhost:21, Owner: no owner
    1,[16/Jan/2003 06:05:06] Rule 'Packet to unopened port received': Blocked: In TCP, the-chief.038.conceptsfa.nl [213.197.7.38:2267]->localhost:21, Owner: no owner
    1,[16/Jan/2003 06:05:12] Rule 'Packet to unopened port received': Blocked: In TCP, the-chief.038.conceptsfa.nl [213.197.7.38:2267]->localhost:21, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, 24.137.3.117:80->localhost:2369, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, 24.137.3.117:80->localhost:2369, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, 24.137.3.117:80->localhost:2369, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2368, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2368, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2368, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2368, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2368, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2368, Owner: no owner
    1,[16/Jan/2003 06:23:14] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2368, Owner: no owner
    1,[16/Jan/2003 06:23:16] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2384, Owner: no owner
    1,[16/Jan/2003 06:23:16] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2384, Owner: no owner
    1,[16/Jan/2003 06:23:16] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2384, Owner: no owner
    1,[16/Jan/2003 07:02:26] Rule 'TCP ack packet attack': Blocked: In TCP, 63.251.213.40:80->localhost:2560, Owner: no owner
    1,[16/Jan/2003 07:10:40] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2678, Owner: no owner
    1,[16/Jan/2003 07:10:40] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2678, Owner: no owner
    1,[16/Jan/2003 07:10:40] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2678, Owner: no owner
    1,[16/Jan/2003 07:10:40] Rule 'TCP ack packet attack': Blocked: In TCP, ns4.cermak.com [24.137.3.117:80]->localhost:2678, Owner: no owner
     
  2. Davey7549

    Davey7549

    Joined:
    Feb 28, 2001
    Messages:
    11,584
  3. Deke40

    Deke40 Thread Starter

    Joined:
    Jun 27, 2002
    Messages:
    6,077
    Thanks Dave. I decided to uncheck the two options for logging and I did that two days ago. I guess everthing is still working the same I'm just not logging the results.

    From what I read Kerio must do a pretty good job.

    Thanks again.
     
  4. Deke40

    Deke40 Thread Starter

    Joined:
    Jun 27, 2002
    Messages:
    6,077
    I unchecked these rules and nothing seems to happen. I am not getting any pop up warning to accept or deny. I guess I should be able to delete these. I think these got in when I first configured and didn't understand.
     

    Attached Files:

  5. Davey7549

    Davey7549

    Joined:
    Feb 28, 2001
    Messages:
    11,584
    Deke
    Looks all is OK now! I wouldn't be concerned if no intrusion pop-ups are occuring.

    Dave
     
  6. Deke40

    Deke40 Thread Starter

    Joined:
    Jun 27, 2002
    Messages:
    6,077
    Dave

    Thanks for the reassurance.
     
  7. Deke40

    Deke40 Thread Starter

    Joined:
    Jun 27, 2002
    Messages:
    6,077
    This sure will make you a believer in firewalls. I got a hit from this address:

    <img src="http://forums.techguy.org/attachment.php?s=&postid=689992">
     

    Attached Files:

  8. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/113541

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice