I have recntly upgraded to medium fibre. The set up of the 633 router was straightforward and seems to working OK. However looking thro' the log I have some queries about some of the messages.
I would be grateful if someone could clarify those below
08:55:01 21/01/2016 SecurityWarning ACCEPT SAMBA Request
08:54:50 21/01/2016 SecurityWarning ACCEPT UDP SAMBA Request
08:11:17 21/01/2016 SecurityWarning Detect UDP port scan attack, scan packet from 78.151.235.129.
02:46:06 21/01/2016SecurityWarning DROP TCP SAMBA Request
01:22:15 21/01/2016SecurityWarning DROP UDP SAMBA Request
00:01:00 21/01/2016SecurityWarning Intrusion -> src=123.151.149.222 DST=XXXXXXXXXX LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=0 DFPROTO=TCP SPT=12209 DPT=3128 WINDOW=8
I assume that the SAMBA ones relate to the use of the USB port ( I do not have anything connected ) so do not understand what is causing these messages.
The port scan attack references the TT DNS server. What is it doing?
The last message seems to be an intrusion attempt form a Chi na Telecom account which is a bit more worrying.
Thanks Chris
