Poisoning attack!!

gooner045

spaceman5 wrote: »

is this eset smart security a good program, i have noticed they make nod32, so is it a earlier version of this

I think nod32 is just anti-virus, the eset is the whole package, firewall,antivirus and spyware, and spam filter.

Personally I think it's an excellent product, very light on resources, very unobtrusive, the only reason I checked the logs, is because it never bothers me with anything, so I was checking it was still there really.

Snap

superscaper

gooner045 wrote: »

Snap

Only just. At least it's the same answer. Would have been embarrassing for someone if we gave contradictory answers.

gooner045

superscaper wrote: »

Only just. At least it's the same answer. Would have been embarrassing for someone if we gave contradictory answers.

And no doubt it would have been me haha

Yes the wireless is encrypted and I havn't got the firewall on the router enabled at least, I cant see whether it is of not, and the DMZ on it confuses me a bit, thats on the same page as the router firewall, at least something stopped that poisoning!!

DatabaseError

my main attacker is 96.52.9.124 S010600195b60797e.ed.shawcable.net with tcp/port scans aplenty, notified the ISP who claimed it is a spoofed IP, who am I to argue?
I did spot one a few months ago from my own ISP (spotted the ip range) did a bit of snooping, notified isp and user, turned out his wireless had been hacked.
The 'attacks' are a regular part of todays internet, which is why we all need firewalls and a/v software, I generally ignore them, but if my log starts showing a lot of activity from 1 range I do contact the ISP to complain.
just noticed 9 attacks from 85.106.230.94, and it resolves to a page (router setup?) now to find a password and reset the !!!!!!

Edit - not lucky enough to have default password, can't be bothered looking for a way around it, beyond my skill

DatabaseError

loaner, talking to OP?

gooner045

Hi
just been into the router settings and there is no where that says that the firewall is actually on, so i ticked all these and re- booted the router.
Firewall Settings Enable DOS and Portscan Protection : SYN attack : FIN/URG/PSH attack : Ping Attack : Xmas Tree attack : TCP reset attack : Null scanning attack : Ping of Death attack : SYN/RST SYN/FIN attack :
So is that the router firewall enabled ?

Thks

gooner045

start>run> ipconfig

A dos window came up and disappeared so quickly, I didnt have time to read it.

Got it now a 192.168.***

gooner045

Hi Loaner
Just done the port sacn test at grc and all passed stealth all green.
Thanks for your help and everybodies input today.
it was a bit different from the usual I cant get my wireless to work or whats the best AV

Gooner

DatabaseError

loaner, my log was from my 2wire firewall, not a software one(nothing gets through without an invite) (though i suppose the router's firewall is running on some flavour of linux, so is, strictly, software, but stored on solid state, so firmware...)

superscaper

As for me router firewall is enabled and all wireless connections encrypted.