cancel
Showing results for 
Search instead for 
Did you mean: 

Spoofing issues on Hub One

mort7890
Pro
Posts: 580
Thanks: 92
Fixes: 4
Registered: ‎28-06-2007

Spoofing issues on Hub One

Not sure what is going on and would appreciate help/comments not noticed this before but in the event log it started @ 03.32 (think the clock is 1hr out) and appears to be still going on

08:43:16, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 192.168.1.254-​>224.0.0.22 on ptm0.101)
08:42:39, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 51.6.109.144-​>224.0.0.22 on ppp3)
08:41:08, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 192.168.1.254-​>224.0.0.22 on ptm0.101)
08:40:31, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 51.6.109.144-​>224.0.0.22 on ppp3)
08:39:07, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 192.168.1.254-​>224.0.0.22 on ptm0.101)
08:38:28, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 51.6.109.144-​>224.0.0.22 on ppp3)
08:37:05, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 192.168.1.254-​>224.0.0.22 on ptm0.101)
08:36:24, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 51.6.109.144-​>224.0.0.22 on ppp3)
08:35:33, 08 Aug. OUT: BLOCK [7] ICMP replay (ICMP type 3 code 1 51.6.109.144-​>216.58.204.234 on ppp3)
08:35:31, 08 Aug. BLOCKED 3 more packets (because of ICMP replay)

 

 

03:32:10, 08 Aug. IN: BLOCK [12] Spoofing protection (IGMP 51.6.109.144-​>224.0.0.22 on ppp3)
5 REPLIES 5
mort7890
Pro
Posts: 580
Thanks: 92
Fixes: 4
Registered: ‎28-06-2007

Re: Spoofing issues on Hub One

 

Just checked the Event Log on my PN Hub One and almost every minute there is

09:07:19, 10 Aug. IN: BLOCK [12] Spoofing protection (IGMP 192.168.1.254-​>224.0.0.22 on ptm0.101)
09:06:43, 10 Aug. IN: BLOCK [12] Spoofing protection (IGMP 51.6.109.144-​>224.0.0.22 on ppp3)
09:05:14, 10 Aug. IN: BLOCK [12] Spoofing protection (IGMP 192.168.1.254-​>224.0.0.22 on ptm0.101)
09:04:39, 10 Aug.

IN: BLOCK [12] Spoofing protection (IGMP 51.6.109.144-​>224.0.0.22 on ppp3)

 

I appreciate that Spoofing protection is working but cannot understand why.so many attacks

Perhaps @bobpullen could assist please.

bobpullen
Community Gaffer
Community Gaffer
Posts: 16,869
Thanks: 4,950
Fixes: 315
Registered: ‎04-04-2007

Re: Spoofing issues on Hub One

Those entries relate to IGMP/Multicasting to/from the Youview IPTV subnets. Put simpler: it's Plusnet TV traffic.

I'm not sure what would lead to the router blocking communication like it appears to be. Good news is, it's nothing sinister.

Do you have a Youview box on your network at all?

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

mort7890
Pro
Posts: 580
Thanks: 92
Fixes: 4
Registered: ‎28-06-2007

Re: Spoofing issues on Hub One

Hi @bobpullen I appreciate it is nothing sinister but from 14.09 to 15.10 (clock is one hour out) there are 89 entries blocking spoofing.

No I do not have a youview box and I only have freeview on a smart TV

bobpullen
Community Gaffer
Community Gaffer
Posts: 16,869
Thanks: 4,950
Fixes: 315
Registered: ‎04-04-2007

Re: Spoofing issues on Hub One

Multicast traffic is present whether you subscribe to our TV service or not. If you did have a Youview box, my clichéd suggestion was going to be to reboot it.

I'd be very surprised if the noise is having a detrimental impact on your service.

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

mort7890
Pro
Posts: 580
Thanks: 92
Fixes: 4
Registered: ‎28-06-2007

Re: Spoofing issues on Hub One

Hi @bobpullen

I don't think it is but strangely enough is that all the entries reported here in my previous messages have disappeared and it restarts at 14.02 today with an entry almost every minute to now. Just thought it may have been an interest somewhere. .