We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Router packet storm

whiwex
whiwex asked
on
Medium Priority
431 Views
Last Modified: 2012-05-11
Every couple of daysmy routers firwall blocks thousands of these packets:
[INFO] Fri Oct 22 01:02:11 2010 Blocked outgoing TCP packet from 72.95.138.176:52078 to 209.195.152.229:80 with unexpected acknowledgement 4059630299 (expected 4059632577 to 4059698113)

How can I find out what is causing this?
Comment
Watch Question

SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
Do you know what these ip addresses are? Looks like a host accessing a website or something.

Author

Commented:
This router is my gateway to the internet and the address belong to verizion.
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
Does your acl limit http outbound traffic.

Author

Commented:
I don't have any acl setup. I'm using a dlink 724GU router. The only thing I am blocking with the routers firewall are some networks from other countrys. Otherwise I am using the defaults.
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
The only thing I can come up with is the destination isn't valid. Try connecting to the site and see if it comes up. Maybe a host in your network is trying to connect to it. Could be a trojan horse or something on one of your hosts trying to hit a no longer valid destination.

Author

Commented:
My router is the 209 address so doesn't this indicate that the router is blocking the packet from the the 72.95.138.176 which is somewhere in verizon?
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011

Commented:
Oh, okay. I thought the 72 address was your router. Yes, this is some ip address trying to access your network on port 80.
Sr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview

Author

Commented:
yes I am hosting a couple of web sites.
SouljaSr.Net.Eng
CERTIFIED EXPERT
Top Expert 2011
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview
Top Expert 2010

Commented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a free trial preview!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.