This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bad Request of port 80

Dear Friends,

I enable the content filter with "Block suspicious and unknown sites" only, the internet pages comes faster than before.

While telneting my linkstar satellite modem, I notice that there are bad requests with port 80, (http://216.35.187.249/) it passes through the ASL normally but they are either bad or not found or even fake sites (http://208.45.133.132).

How can I disable accessing to these sites ? Since it is making my bandwidth choking ?

Regards,

ASL 6.001, 2.2GHz Celeron D, 512MB, 80GB

This thread was automatically locked due to age.

0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

According to my licence you don't get Cobion unless you pay for a licence.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to RFCat_vk_01

216.35.187.249   : 80
208.45.133.132   : 80
207.25.253.24     : 80
213.254.17.31     : 80

Dear Friends,

Can anyone tell me what are these sites ?

When I telnet my Satellite modem , I can see these sites requested 10 times, which makes traffic in my BandWidth

How can I block these sites ? and How can I know WHO IS REQUESTING IT ?

Regards
My clients are
Cancel
Vote Up 0 Vote Down

Cancel
0 Vukasin over 20 years ago in reply to AliIsmail

did you try adding these sites to the blacklist?
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to Vukasin

They are more than 4, they are too many.

I will try to put them in my blacklist

BUT I NEED TO KNOW WHICH PC IS REQUESTING THEM ?
I GUESS ASTARO CANNOT FIND WHO ?

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

If you were using the HTTP proxy, you would get a report every day with who accessed what.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to RFCat_vk_01

I need an online log of who access who.

I also when telnet my satelite modem, I can see that when I request yahoo site, it shows about 5 IPs of yahoo. Is this spoofing ?

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 20 years ago in reply to AliIsmail

No, you will get heaps, they have advertising, spyware, a number of other pages all linked into their main page. I found it a pain while trying to work out what servers to allow.
Also I hope they don't change any of their servers because all my white and black rules will need to be re-worked.

From what you have just said and reminded me of, is that list of sites you want to block, might be a number of linked sites from a home page. Block the homepage and the rest won't happen.

At least it is something to try rather than blanket blocking.

Ian M [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to RFCat_vk_01

Thanks for your reply. but can you help in finding the url of the above IP addresses.

Is there any tool or site, that I can put the IP and it show its URL ?

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 doug_p over 20 years ago in reply to AliIsmail

It won't quite give an IP to URL lookup, but http://www.dnsstuff.com/ does have whois, reverse DNS and other lookups that may be helpfull.
Cancel
Vote Up 0 Vote Down

Cancel
0 AliIsmail over 20 years ago in reply to doug_p

Hello, Still these IPs are strange BUT when I blocked them, I noticed that these IPs are helpful for the yahoo mail specially
213.254.17.X

I did not find any site that shows the real use of these IPs.

Regards,
Cancel
Vote Up 0 Vote Down

Cancel