Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » DSL-Router fills security log with anti-spoofing packets entries
  •  
profisender

Messages: 25
Karma: 1
Send a private message to this user
Hi,
our DSL-Router (192.168.10.205) permanently sends anti-spoofing packets to our control and fills up the security-log:

[08/Oct/2012 11:09:48] Anti-spoofing: Packet from Internet DSL, proto:TCP, len:64, 77.22.1x2.2x4:33663 -> 192.168.10.205:443, flags:[ SYN ], seq:1038945178 ack:0, win:64240, tcplen:0
[08/Oct/2012 11:09:51] Anti-spoofing: Packet from Internet DSL, proto:TCP, len:64, 77.22.1x2.2x4:33663 -> 192.168.10.205:443, flags:[ SYN ], seq:1038945178 ack:0, win:64240, tcplen:0
[08/Oct/2012 11:09:57] Anti-spoofing: Packet from Internet DSL, proto:TCP, len:64, 77.22.1x2.2x4:33663 -> 192.168.10.205:443, flags:[ SYN ], seq:1038945178 ack:0, win:64240, tcplen:0
[08/Oct/2012 11:10:09] Anti-spoofing: Packet from Internet DSL, proto:TCP, len:64, 77.22.1x2.2x4:33663 -> 192.168.10.205:443, flags:[ SYN ], seq:1038945178 ack:0, win:64240, tcplen:0
[08/Oct/2012 11:10:33] Anti-spoofing: Packet from Internet DSL, proto:TCP, len:64, 77.22.1x2.2x4:33663 -> 192.168.10.205:443, flags:[ SYN ], seq:1038945178 ack:0, win:64240, tcplen:0
[08/Oct/2012 11:11:21] Anti-spoofing: Packet from Internet DSL, proto:TCP, len:64, 77.22.1x2.2x4:33663 -> 192.168.10.205:443, flags:[ SYN ], seq:1038945178 ack:0, win:64240, tcplen:0

DSL-Router is a AVM 7170. Anybody knows whats that is and how to disable or something?

--
Andre
  •  
Lucian Maly (Kerio)

Messages: 136
Karma: 8
Send a private message to this user
Router does not send anti-spoofing packets. Anti-spoofing is security feature in Kerio Control. Anti-Spoofing checks whether only packets with allowed source IP addresses are received at individual interfaces of the Kerio Control host. This function protects Kerio Control host from attacks from the internal network that use false IP addresses (so called spoofing).

For each interface, any source IP address belonging to any network connected to the interface is correct (either directly or using other routers). For any interface connected to the Internet (so called external interface), any IP address which is not allowed at any other interface is correct.

Detailed information on networks connected to individual interfaces is acquired in the routing table.

The Anti-Spoofing function can be configured in the Anti-Spoofing folder in Configuration Advanced Options.

Kerio Technologies AU Pty Ltd.
Previous Topic: Block ultrasurf
Next Topic: Cache BUG
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Oct 17 16:57:44 CEST 2017

Total time taken to generate the page: 0.00375 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.