DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

DOS Mail Alerts - DOS Blocking packets from own IP address?

More
17 Jun 2009 16:07 #56380 by leapy
DOS Mail Alerts - DOS Blocking packets from own IP address? was created by leapy
hello

I keep receiving email alerts from my Vigor 2820n where my public IP range is from a.b.c.233 to a.b.c.238:

Code:
[DOS][Block][trace_route][a.b.c.238:19804->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:19804->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:19804->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.233:16309->a.b.c.233:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.233:16309->a.b.c.233:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.233:16309->a.b.c.233:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.233:16309->a.b.c.233:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:12743->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:12743->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:12743->a.b.c.238:33437][UDP][HLen=20, TLen=32]


or

Code:
[DOS][Block][trace_route][a.b.c.238:16259->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:16259->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:16259->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:16259->a.b.c.238:33437][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:10489->a.b.c.238:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:10489->a.b.c.238:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:10489->a.b.c.238:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:10489->a.b.c.238:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:10195->a.b.c.238:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.238:10195->a.b.c.238:33436][UDP][HLen=20, TLen=32]


Can anybody advise what is triggering these alerts? Do I need to worry about them?

Thanks

L

Please Log in or Create an account to join the conversation.

More
17 Jun 2009 18:07 #56384 by ryster
Replied by ryster on topic DOS Mail Alerts - DOS Blocking packets from own IP address?
Funny, I get the same thing. Quite often from times when my PCs are turned off, like the middle of the night, or when I'm at work.

Code:
[DOS][Block][trace_route][a.b.c.d:12313->a.b.c.d:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:12313->a.b.c.d:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:12313->a.b.c.d:33436][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:10544->a.b.c.d:33440][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:10544->a.b.c.d:33444][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:10544->a.b.c.d:33440][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:10544->a.b.c.d:33444][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:10544->a.b.c.d:33440][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:10544->a.b.c.d:33444][UDP][HLen=20, TLen=32] [DOS][Block][trace_route][a.b.c.d:10544->a.b.c.d:33440][UDP][HLen=20, TLen=32]


Any clue what these are? Am I safe to turn off the "trace_route" DoS protection to stop these, or shall I just filter them out of my inbox?

Please Log in or Create an account to join the conversation.

Moderators: Sami