DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Vigor130 and Asus firewall log

  • adrianh54
  • Topic Author
  • User
  • User
More
04 Jul 2015 19:35 #1 by adrianh54
Vigor130 and Asus firewall log was created by adrianh54
I am seeing constant rejected packets logged by the firewall on my Asus router.

It is constant 24/7 and I am sure it shouldn't be happening.

Could someone with more knowledge of these things explain what is happening here ?

Code:
Jul 4 12:46:26 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9207 PROTO=UDP SPT=3794 DPT=4944 LEN=124 Jul 4 12:46:36 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9208 PROTO=UDP SPT=3796 DPT=4944 LEN=124 Jul 4 12:46:46 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9209 PROTO=UDP SPT=3807 DPT=4944 LEN=124 Jul 4 12:46:56 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9210 PROTO=UDP SPT=3827 DPT=4944 LEN=124 Jul 4 12:47:06 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9211 PROTO=UDP SPT=3856 DPT=4944 LEN=124 Jul 4 12:47:16 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9212 PROTO=UDP SPT=3894 DPT=4944 LEN=124 Jul 4 12:47:26 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9213 PROTO=UDP SPT=3941 DPT=4944 LEN=124 Jul 4 12:47:36 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9214 PROTO=UDP SPT=3997 DPT=4944 LEN=124 Jul 4 12:47:46 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1d:aa:88:53:e0:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=144 TOS=0x00 PREC=0x00 TTL=254 ID=9215 PROTO=UDP SPT=4062 DPT=4944 LEN=124

Please Log in or Create an account to join the conversation.

More
05 Jul 2015 18:57 #2 by voodle
Replied by voodle on topic Re: Vigor130 and Asus firewall log
To fix that, go onto the V130's web interface and go to system maintenance > management, on there, untick:
Broadcast DSL status to LAN
and click OK, that should fix it :)

Please Log in or Create an account to join the conversation.

  • adrianh54
  • Topic Author
  • User
  • User
More
06 Jul 2015 05:34 #3 by adrianh54
Replied by adrianh54 on topic Re: Vigor130 and Asus firewall log

Voodle wrote: To fix that, go onto the V130's web interface and go to system maintenance > management, on there, untick:
Broadcast DSL status to LAN
and click OK, that should fix it :)



Thank you, that would be a nice idea but unfortunately there is no such setting within the GUI.

I notice that some of the screenshots of the Vigor130 interface available on the net are very diffferent from the actual GUI on this modem, there is no "wizard" and very few settings are available.

Please Log in or Create an account to join the conversation.

More
06 Jul 2015 09:28 #4 by voodle
Replied by voodle on topic Re: Vigor130 and Asus firewall log
Hmm good point :) Well I know that's what that traffic is, so it's not really anything to worry about. I guess you might need to contact support to ask them to add that menu option back in if you want to turn it off?

Please Log in or Create an account to join the conversation.

  • adrianh54
  • Topic Author
  • User
  • User
More
06 Jul 2015 10:00 #5 by adrianh54
Replied by adrianh54 on topic Re: Vigor130 and Asus firewall log

Voodle wrote: Hmm good point :) Well I know that's what that traffic is, so it's not really anything to worry about. I guess you might need to contact support to ask them to add that menu option back in if you want to turn it off?



Sounds like the only option , I can't see anything in telnet that relates to that setting.

Please Log in or Create an account to join the conversation.

  • adrianh54
  • Topic Author
  • User
  • User
More
06 Jul 2015 12:09 #6 by adrianh54
Replied by adrianh54 on topic Re: Vigor130 and Asus firewall log
Okay problem solved.

I was sure that those log entries were not seen when I first installed the modem 2 weeks ago.

I ugraded the firmware at the time of install , several times since the modem has dropped the connection for no apparent reason, I have not had a single disconnect or resynch for 18 months prior to changing modem.

On Sunday @ 02.16 hrs my line was dropped and I lost a lot of throughput. I now have interleaving turned on and a greatly reduced profile.

More worrying was the modem lights were cycling at random, yet the router was connected and we had internet access.

The web interface was unreachable and telnet failed to connect.

Swapped back to the ECI modem until just now.

I was on the verge of returning the modem , but had another try to get things running. I had to use factory reset 3 times before I got access to the web interface again.

I reflashed the firmware with the .rst file and now have access to GUI and telnet again.

Since doing this the dsl reporting has gone, so it seems there was a problem with the first firmware upgrade .

Please Log in or Create an account to join the conversation.