Leonid_Z

Advanced Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору Народ, помогите разобраться что к чему... Мой фаервол постоянно блокирует такое вот: Цитата: Event, Intruder, Count, TCP Flags, Protocol ID, Destination Port, Source Port, Parameter(s) Ident_Overflow, a24a.paawola.ton.tut.fi, 1, 0x00000018, TCP, 53828, 113, command=.?.0...._..."...!....#...$...%25...'..6L.oVE...b.%26.f..o...KBq.....theBULL...<.o.... Ident_Overflow, line-103.dsl.kpo.dnainternet.fi, 1, 0x00000018, TCP, 51712, 113, command=.d.0...._..."...!@...#...$...w........%25...U.Plus_1h..>_....'..AL1.Yf...de2.`..o%3D Ident_Invalid_Response, line-103.dsl.kpo.dnainternet.fi, 1, 0x00000018, TCP, 51712, 113, reason=First+port+number+invalid&length=125&ident=.d Ident_Overflow, a24a.paawola.ton.tut.fi, 1, 0x00000018, TCP, 36984, 113, command=.?.0...._..."...!....#...$...%25...'..6L.oVE...b.%26.f..o...KBq.....theBULL...<.o.... Ident_Overflow, 212.116.33.103, 1, 0x00000018, TCP, 35145, 113, command=.d.0...._..."...!@...#...$...w........%25...U.Plus_1h..>_....'..AL1.Yf...de2.`..o%3D Ident_Overflow, a24a.paawola.ton.tut.fi, 6, 0x00000018, TCP, 25948, 113, command=.?.0...._..."...!....#...$...%25...'..6L.oVE...b.%26.f..o...KBq.....theBULL...<.o.... Ident_Overflow, line-103.dsl.kpo.dnainternet.fi, 65, 0x00000018, TCP, 21196, 113, command=.d.0...._..."...!@...#...$...w........%25...U.Plus_1h..>_....'..AL1.Yf...de2.`..o%3D Ident_Invalid_Response, line-103.dsl.kpo.dnainternet.fi, 88, 0x00000018, TCP, 21196, 113, reason=First+port+number+invalid&length=125|205|210|266|324|346&ident=.d Ident_Overflow, 80.235.70.96, 16, 0x00000018, TCP, 4018, 113, command=./.%25...._..."...!{..#...$..LL.#p6.....z.lDXoFP.F`q.....Serega_(rus)(de)(eng)...<...q Ident_Overflow, 80.235.57.197, 22, 0x00000018, TCP, 3822, 113, command=.?.0...._..."...!@...#...$...%25...'..ALm'."%25...f..d.VodP.9.q.....scout(rus)(de)[fr].. Ident_Overflow, 80-235-60-99-dsl.trt.estpak.ee, 1, 0x00000018, TCP, 25090, 113, command=.?.0...._..."...!@...#...$...%25...'..ALm'."%25...f..d.VodP.<cq.....scout(rus)(de)[fr].. Ident_Overflow, 80.235.34.44, 2, 0x00000018, TCP, 3928, 113, command=.?.0...._..."...!q..#...$...%25...'..5L...J.."@5....oBP.".q.....lurpak...<.o..... Ident_Overflow, 80.235.40.2, 53, 0x00000018, TCP, 1391, 113, command=.?.0...._..."...!q..#...$...%25...'..5L...J.."@5....oBP.(.q.....lurpak...<.......|.?.0...._..."...!q..#...$...%25...'..5L...J.."@5....oBP.(.q.....lurpak...<....5..|.?.0...._..."...!q..#...$...%25...'..5L...J.."@5....oBP.(.q.....lurpak...<.{l....| Ident_Overflow, 213.219.91.182, 33, 0x00000018, TCP, 1427, 113, command=.\.(...._..."...!q..#...$...w........%25...U.Plus_1g..>_...FL.;.....I.k...Boi..[.q. Ident_Overflow, 213-35-174-152-dsl.prn.estpak.ee, 2, 0x00000018, TCP, 61930, 113, command=.?.0...._..."...!6...#...$...%25...'..GL./.r...E`".j.<o%26.#..q.....http://emule-project. Ident_Overflow, 80-235-60-99-dsl.trt.estpak.ee, 1, 0x00000018, TCP, 3671, 113, command=.?.0...._..."...!@...#...$...%25...'..ALm'."%25...f..d.VodP.<cq.....scout(rus)(de)[fr].. Ident_Overflow, salehto-dsl.oulu.fi, 6, 0x00000018, TCP, 52439, 113, command=.?.0...._..."...!{..#...$...%25...'..4L{J.I...{?.G?.o7....q.....Trogo...<........|.?.0...._..."...!{..#...$...%25...'..4L{J.I...{?3.G?.o7....q.....Trogo...<.o......|.?.0...._..."...!{..#...$...%25...'..4L{J.I...{?3.G?.o7....q.....Trogo...<.o.....B| Ident_Overflow, salehto-dsl.oulu.fi, 8, 0x00000018, TCP, 31518, 113, command=.?.0...._..."...!{..#...$...%25...'..4L{J.I...{?.G?.o7....q.....Trogo...<.o......|.?.0...._..."...!{..#...$...%25...'..4L{J.I...{?3.G?.o7....q.....Trogo...<.o.....B Ident_Overflow, salehto-dsl.oulu.fi, 1, 0x00000018, TCP, 61381, 113, command=.?.0...._..."...!{..#...$...%25...'..4L{J.I...{?3.G?.o7....q.....Trogo...<.o.....B Ident_Overflow, 213-35-168-246-dsl.trt.estpak.ee, 1, 0x00000018, TCP, 30352, 113, command=.X.0...._..."...!..#...$...%25...'...U.The_Black_Hand_-_v3.NL.8.;..../'T".Co..#..q... Ident_Overflow, 213-35-169-123-dsl.trt.estpak.ee, 1, 0x00000018, TCP, 3582, 113, command=.X.0...._..."...!..#...$...%25...'...U.The_Black_Hand_-_v3.NL.8.;..../'T".Co..#.{q... Ident_Overflow, 212.116.33.103, 1, 0x00000018, TCP, 35145, 113, command=.d.0...._..."...!@...#...$...w........%25...U.Plus_1h..>_....'..AL1.Yf...de2.`..o%3D Ident_Overflow, line-103.dsl.kpo.dnainternet.fi, 1, 0x00000018, TCP, 26256, 113, command=.d.0...._..."...!@...#...$...w........%25...U.Plus_1h..>_....'..AL1.Yf...de2.`..o%3D Ident_Overflow, IMAGINATION, 1, 0x00000018, TCP, 61417, 113, command=.d.0...._..."...!@...#...$...w........%25...U.Plus_1h..>_....'..AL1.Yf...de2.`..o%3D Ident_Overflow, 80-235-69-1-dsl.trt.estpak.ee, 1, 0x00000018, TCP, 18558, 113, command=.d.0...._..."...!{..#...$...w........%25...U.Plus_1h..>_....'..OLLt.iD..w.J+..Qo. Ident_Overflow, 80-235-62-48-dsl.trt.estpak.ee, 5, 0x00000018, TCP, 54774, 113, command=.d.0...._..."...!{..#...$...w........%25...U.Plus_1h..>_....'..OLLt.iD..w.J+..Qo. | Как я понимаю всё это связано с трафиком осла, но зачем ему порт 113? Здесь я привёл сильно отфильтрованный лог за последние 2 дня, а так такого добра пруд пруди . |