Hi

I have Syslog on my 2830n routed to my Synology NAS and have a Syslog management tool on this NAS.

I keep getting these ALert messages :-


[DOS][Block][tcp_flag, scanner=fin_wo_ack][192.168.2.106:59630->17.250.248.161:443][TCP][HLen=20, TLen=52, Flag=F, Seq=1919881441, Ack=0, Win=65535]


Checking this particular IP address traces it back to Apple and as all my computers are Apple this is not a real surprise but WHY is it creating this particular response from my Draytek?

Robin

Try running nettop on your Mac, I saw the following the other day :-

http://hints.macworld.com/article.php?story=20110906200849542&query=nettop

buy a windows PC

Now why would I want to make such a huge retrograde step as that!

This is a known problem with MacOS X TCP/IP implementation:

http://groups.google.com/group/comp.sys.mac.system/browse_thread/thread/547828306ab50b05/86f016cfbdb334dd

Damien

Okay

So that one sounds like a bug.

The following is actually the most common error message i get, I ASSUME this is a Trace Route attempt which the Vigor is blocking, am I correct?

Host: '192.168.2.1', IP: '192.168.2.1', Level: 'alert', Date: '2011-09-26', Time: '11:50:49', Program: 'Vigor2830n', Message: '[DOS][Block][trace_route][204.14.232.174:12852->81.156.185.235:33437][UDP][HLen=20, TLen=32]'

Robin