[9.091] IPS going crazy

While my UTM was rebooting after the update I let ran a "ping -t" on it to see when it went up again, like everytime in the past [;)]

After this reboot the UTM flooded my mailbos with an extreme amount of IPS mail warning notifications.

I have attached the corresponding logfile.

ipslog.zip

Parents

0 Monarch over 12 years ago

Such warnings are complete bullshit in my opinion [;)]

I will disable the corresponding Snort rule, just wondering why this didn't occur during the last few years I'm using Astaro now [8-)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 lmatt over 12 years ago in reply to Monarch

just wondering why this didn't occur during the last few years I'm using Astaro now [8-)]

The rule was added on Mon Nov 20 23:20:58 2006
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BarryG over 12 years ago in reply to lmatt

The rule was added on Wed Jan 20 20:01:57 2010

That just says when the rule was created for Snort; it doesn't tell us when it was added to Astaro/UTM.

Barry
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 12 years ago in reply to BarryG

I agree with Bastian, I always ping all my servers including astaro when I am rebooting and I have never been flooded with ICMP messages. Not that anything is wrong with it, this has not been the behavior previously.

Regards
Bill
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Billybob over 12 years ago in reply to BarryG

I agree with Bastian, I always ping all my servers including astaro when I am rebooting and I have never been flooded with ICMP messages. Not that anything is wrong with it, this has not been the behavior previously.

Regards
Bill
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data

[9.091] IPS going crazy

Submitted a Tech Support Case lately from the Support Portal?