This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Attack Rules: LAND Attack, sameip detected

Hi;

On my astaro I keep seeing on the daily report in the Intrusion Prevention System, that I'm getting constant events registered. The source ip and destination ip are both the same, and it's my actual static ip address. The attack rule is 200012 - LAND Attack, sameip detected - Server / Misc / FTP.

I gather I have something set wrong some-where.

Trevor..

This thread was automatically locked due to age.

Parents

0 utm_kid over 15 years ago

Hi,

Is u r wan ip in bridge mode ,

u can add execption to this id in ips section

did u try find snortid for this id

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 TrevorFurnell over 15 years ago in reply to utm_kid

Hi;

My ADSL router is in bridge mode,
So what is the exception I need to add, and where..?

Thanks.
Trevor..
Cancel
Vote Up 0 Vote Down

Cancel
0 utm_kid over 15 years ago in reply to TrevorFurnell

Hello ,

You can try this Network Security>>>Intrusion Prevention>>>Advanced>>Modify rule>>disable this that with number ( 200012 ?)
can u please check ips log also
(r u using ftp server ?)

friends please correct me if i am wrong

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 utm_kid over 15 years ago in reply to TrevorFurnell

Hello ,

You can try this Network Security>>>Intrusion Prevention>>>Advanced>>Modify rule>>disable this that with number ( 200012 ?)
can u please check ips log also
(r u using ftp server ?)

friends please correct me if i am wrong

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data