Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Firewall icmp check
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Re: Firewall icmp check
Firewall icmp check
02-03-2014 3:48 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Looking at my event logs recently and saw this 1
Redirect code: redirect data gram for the host
The source ip is from Korea and gas no host name associated with it
Should I be worried about this?
Thanks
Mark
Redirect code: redirect data gram for the host
The source ip is from Korea and gas no host name associated with it
Should I be worried about this?
Thanks
Mark
Message 1 of 8
(1,936 Views)
7 REPLIES 7
Re: Firewall icmp check
03-03-2014 4:28 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Is the above problem anything to do with this?
http://www.bbc.co.uk/news/technology-26417441
http://www.bbc.co.uk/news/technology-26417441
Message 2 of 8
(973 Views)
Re: Firewall icmp check
06-03-2014 11:40 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
I have investigated this a bit but not quite sure if it's malicious or not is there any way to check to see if it has changed the routing in my router
Thanks
Mark
Thanks
Mark
Message 3 of 8
(973 Views)
Re: Firewall icmp check
06-03-2014 11:52 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Are you able to telnet into the router
If so can you post the results
[code=Telnet File=Get router Stats]
Command Comments
xdsl info expand=enabled See Telnet Scripting for a method to get these stats quick.[/code]
You can also find more commands here
http://npr.me.uk/telnet.html
I also mentioned about a recent trend from Korea & other countries, that I have seen
First mentioned here http://community.plus.net/forum/index.php/topic,122856.msg1076068.html#msg1076068
Will see if I can find the other thread for reference
Edit:
Here it is even though Plusnet have not addressed it as yet
Firewall attacks from Telecoms Worldwide (anyone else seeing this trend) ?
If so can you post the results
[code=Telnet File=Get router Stats]
Command Comments
xdsl info expand=enabled See Telnet Scripting for a method to get these stats quick.[/code]
You can also find more commands here
http://npr.me.uk/telnet.html
I also mentioned about a recent trend from Korea & other countries, that I have seen
Quote Error Feb 19 14:23:03 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 175.215.16.88 [Korea Telecom] Dst ip: [IP Address Removed] Type: Destination Unreachable Code: Port Unreacheable
First mentioned here http://community.plus.net/forum/index.php/topic,122856.msg1076068.html#msg1076068
Will see if I can find the other thread for reference
Edit:
Here it is even though Plusnet have not addressed it as yet
Firewall attacks from Telecoms Worldwide (anyone else seeing this trend) ?
Message 4 of 8
(973 Views)
Re: Firewall icmp check
06-03-2014 12:12 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
That command is to display the Technicolor routers ADSL connection stats.
It's nothing to do with URL redirection.
If the OP is using a technicolor router:
1) AFAIK these routers are not affected by the Hack reported in the BBC link.
2) IF the log report was from the firewall (which they often are), it just shows the firewall is doing it's job.
Nothing to worry about IMO.
It's nothing to do with URL redirection.
If the OP is using a technicolor router:
1) AFAIK these routers are not affected by the Hack reported in the BBC link.
2) IF the log report was from the firewall (which they often are), it just shows the firewall is doing it's job.
Nothing to worry about IMO.
Message 5 of 8
(973 Views)
Re: Firewall icmp check
06-03-2014 12:56 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Thanks for the replies for information it is the plusnet supplied technicolor router I don't know if it came from the Firewall it was just a 1 off in amongst the usual port unreachable and destination unreachable messages and port scans
I have been seeing a few time to live exceeded messages recently.
I will try to telnet in later to get he stats
Why would somebody send a request to get the adsl connection stats?
Thanks
Mark
I have been seeing a few time to live exceeded messages recently.
I will try to telnet in later to get he stats
Why would somebody send a request to get the adsl connection stats?
Thanks
Mark
Message 6 of 8
(973 Views)
Re: Firewall icmp check
06-03-2014 1:59 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
As npr said the router firewall looks like it is doing its job & preventing the Koreans access
Message 7 of 8
(973 Views)
Re: Firewall icmp check
06-03-2014 2:58 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
It's when the router stops reporting issues that you need to worry
Message 8 of 8
(973 Views)
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page