This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[7.403]Netbios issue

Hi All

It take ages to copy a single file from my private zone to my DMZ zone and it usually times out. I've tried the following files
txt file successful
pdf file successful
backup image (*.bf) (times out after trying for a long time)

I've checked the logs and I can't find and errors/blocks etc. Could you please advice?

This thread was automatically locked due to age.

Parents

0 wingman over 16 years ago

Update

I got the following under the IDS and I assume that's why I couldn't copy the files


Intrusion Protection Alert



An intrusion has been detected. The packet has been dropped automatically.

You can toggle this rule between "drop" and "alert only" in WebAdmin.



Details about the intrusion alert:



Message........: BACKDOOR exception 1.0 runtime detection - initial connection server-to-client

Details........: www.snort.org/.../sigs.cgi

Time...........: 2009:05:30-17:30:03

Packet dropped.: yes

Priority.......: 1 (high)

Classification.: A Network Trojan was detected IP protocol....: 6 (TCP)



Source IP address: 172.16.1.2

- www.dnsstuff.com/.../ptr.ch

- www.ripe.net/.../whois

- ws.arin.net/.../whois.pl

- cgi.apnic.net/.../whois.pl

Source port: 445 (microsoft-ds)

Destination IP address: 192.168.2.31

- www.dnsstuff.com/.../ptr.ch

- www.ripe.net/.../whois

- ws.arin.net/.../whois.pl

- cgi.apnic.net/.../whois.pl

Destination port: 1375 (bytex)

        



-- 

System Uptime      : 0 days 21 hours 17 minutes

System Load        : 1.11

System Version     : Astaro Security Gateway Software 7.403



Please refer to the manual for detailed instructions.

Reply

0 wingman over 16 years ago

Update

I got the following under the IDS and I assume that's why I couldn't copy the files


Intrusion Protection Alert



An intrusion has been detected. The packet has been dropped automatically.

You can toggle this rule between "drop" and "alert only" in WebAdmin.



Details about the intrusion alert:



Message........: BACKDOOR exception 1.0 runtime detection - initial connection server-to-client

Details........: www.snort.org/.../sigs.cgi

Time...........: 2009:05:30-17:30:03

Packet dropped.: yes

Priority.......: 1 (high)

Classification.: A Network Trojan was detected IP protocol....: 6 (TCP)



Source IP address: 172.16.1.2

- www.dnsstuff.com/.../ptr.ch

- www.ripe.net/.../whois

- ws.arin.net/.../whois.pl

- cgi.apnic.net/.../whois.pl

Source port: 445 (microsoft-ds)

Destination IP address: 192.168.2.31

- www.dnsstuff.com/.../ptr.ch

- www.ripe.net/.../whois

- ws.arin.net/.../whois.pl

- cgi.apnic.net/.../whois.pl

Destination port: 1375 (bytex)

        



-- 

System Uptime      : 0 days 21 hours 17 minutes

System Load        : 1.11

System Version     : Astaro Security Gateway Software 7.403



Please refer to the manual for detailed instructions.

Children

No Data