Kernel Intrusion

Soldato
Joined
22 Nov 2002
Posts
17,679
Location
Wherever I want to be
Some ****** in China is causing my Sky Sagem router to report the following:

Mar 1 12:54:53 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=97.81.165.234 DST=90.218.118.181 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=4856 DF PROTO=TCP SPT=4743 DPT=2926 WINDOW=16384 RES=0x00 SYN URGP=0

Mar 1 12:54:56 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=97.81.165.234 DST=90.218.118.181 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=5070 DF PROTO=TCP SPT=4743 DPT=2926 WINDOW=16384 RES=0x00 SYN URGP=0

Mar 1 12:54:59 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=97.81.165.234 DST=90.218.118.181 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=5197 DF PROTO=TCP SPT=4744 DPT=2926 WINDOW=16384 RES=0x00 SYN URGP=0

Mar 1 12:55:02 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=97.81.165.234 DST=90.218.118.181 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=5455 DF PROTO=TCP SPT=4744 DPT=2926 WINDOW=16384 RES=0x00 SYN URGP=0

Mar 1 12:55:08 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=97.81.165.234 DST=90.218.118.181 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=5949 DF PROTO=TCP SPT=4744 DPT=2926 WINDOW=16384 RES=0x00 SYN URGP=0

Mar 1 12:57:00 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=222.208.183.218 DST=90.218.118.181 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=256 DF PROTO=TCP SPT=12200 DPT=8080 WINDOW=8192 RES=0x00 SYN URGP=0

Mar 1 12:57:31 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=222.208.183.218 DST=90.218.118.181 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=256 DF PROTO=TCP SPT=12200 DPT=8000 WINDOW=8192 RES=0x00 SYN URGP=0

Mar 1 12:58:03 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=222.208.183.218 DST=90.218.118.181 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=256 DF PROTO=TCP SPT=12200 DPT=1080 WINDOW=8192 RES=0x00 SYN URGP=0


What do I do now? Could it be a general fault with my line why my broadband is running so badly or are these idiots causing it by keep bashing my router?

I'm not the only one to have suffered this, someone on skyuser also reported it...:confused:

How do I close any ports?
 
Well to go indepth about my connection problem, Sky say my line has lots of errors, blaming the filters for it...failing that the router is to blame :(
 
You on a long line? I used to get 3.5Mb with 56dB loss, but I was getting 16k FECs a second and that caused massive instabilty for me. When the FECs disappeared I was nice and stable.

ADSL Link Downstream Upstream
Connection Speed 6141 kbps 796 kbps
Line Attenuation 48.0 db 25.8 db
Noise Margin 6.6 db 11.0 db

I had my own actual line installed in the bedroom, so the cabling runs from one end of the house to the other being a bungalow...
 
Back
Top Bottom