Member Avatar for et1

Hi,
I've NetGear FVS318 ProSafe VPN Firewall router. On of my net work computer is visiting apnic.net. The router was flood with UDP datat and other computer get hard time to go on line. I've got the following from security log.
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:123.0.239.92, 15362, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:114.40.204.27, 6754, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:218.163.204.44, 3344, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:61.58.68.130, 14871, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:218.102.66.249, 18903, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:61.217.225.138, 16961, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:122.100.247.73, 2927, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:123.202.46.36, 2773, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:122.116.56.224, 10798, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:183.178.129.146, 63537, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:123.194.91.241, 8278, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:125.229.16.207, 14996, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:125.95.156.9, 11583, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:61.227.97.146, 17220, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:220.142.175.81, 65535, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:203.186.18.201, 13254, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:115.82.164.96, 3107, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:114.44.68.123, 6131, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:123.195.178.254, 18836, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:118.165.141.3, 7226, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:61.230.6.89, 14147, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:123.192.43.154, 4234, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:219.77.2.244, 13320, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:114.36.177.65, 11098, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:61.238.146.20, 13640, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:123.204.159.96, 10000, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:58.115.137.73, 25159, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:28 - UDP packet dropped - Source:114.233.162.126, 3883, WAN - Destination:71.160.237.8, 5101, LAN - 'Suspicious UDP Data'
Sun, 03/28/2010 14:47:30 - UDP packet dropped - Source:210.6.42.7CÐÅ
How can I block this.
Thanks
et1

  • 3 Contributors
  • 2 Replies
  • 164 Views
  • 4 Days Discussion Span
  • Latest Post Latest Post by rajeev.rangaraj
Member Avatar for Deve

hey i am second year diploma student so i need to make final year project on networking so suggest me on topic

Member Avatar for rajeev.rangaraj

try to enforce a policy for the unknown UDP traffic which is coming ....i dont know much about your firewall but i do work on firewalls and i do block unknown multicast traffic.....

try it let me know

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.