This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Intrusion Prevention blocking ubuntuforums.org

This is on Astaro Security Gateway v8

This only happens on Linux not windows

Upgrading from ubuntu 10.04 LTS to 12.04.5 LTS. This also happens with Fedora x86_64-20-1

Now after upgrading when ever i try to go to the Ubuntu forum's i get block (example: [ubuntu] snort - Invalid CIDR block for IP

Seems to only happen when i go to something with (.php?t=1002912) in the URL.


Intrusion Prevention Alert

An intrusion has been detected. The packet has been dropped automatically.


Details about the intrusion alert:

Message........: SPECIFIC-THREATS RedKit Repeated Exploit Request Pattern
Details........: http://www.snort.org/search/sid/23218?r=1
Time...........: 2014:11:19-10:44:33
Packet dropped.: yes
Priority.......: high
Classification.: A Network Trojan was detected IP protocol....: 6 (TCP)

Source IP address: 192.168.2.55
Source port: 38411

Destination IP address: 91.189.94.12 (feijoa.canonical.com)
Destination port: 80 (http)



This is driving me crazy why does Linux do this but not windows?

What do i need to do to get this to stop.

Please help [:D]


This thread was automatically locked due to age.
Parents Reply Children
No Data