• November 04, 2024, 09:37:47 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: SHould I be worried about connections to addresses on my internal network?  (Read 3025 times)

Yanta

  • Level 2 Member
  • **
  • Posts: 66
SHould I be worried about connections to addresses on my internal network?
« on: January 28, 2012, 01:17:51 PM »
I am seeing several of these in my log on my router.

Blocked incoming ICMP error message (ICMP type 3) from 66.8.230.195 to 220.245.125.75 as there is no TCP connection active between 220.245.125.75:53340 and 192.168.1.143:63237

Blocked incoming ICMP error message (ICMP type 3) from 92.37.96.204 to 220.245.125.75 as there is no TCP connection active between 220.245.125.75:53501 and 192.168.1.100:64323

And on various other addresses between 100 - 254 on my network.

What caught my attention was that is says "Connection active".

My DHCP range is 192.168.1.2 to 192.168.1.13 and I use MAC address based DHCP reservations for my PCs and iPods. The printers and TVs have static addresses in the range 14 - 20. I have no addresses used above 192.168.1.20.

I guess it's good that they are blocked, but is the message suggesting that a connection was successfully established at some point, and do I have a vunerability in my network?

thanks
Tanya
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: SHould I be worried about connections to addresses on my internal network?
« Reply #1 on: January 28, 2012, 01:29:45 PM »
I would check the status/ device info page of the router to see if there are any connected devices in this ranges.
These entries are common as the router is just reporting what its doing. The firewall is working.
I would also scan for any malware and viruses on all pcs to be sure.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

Yanta

  • Level 2 Member
  • **
  • Posts: 66
Re: SHould I be worried about connections to addresses on my internal network?
« Reply #2 on: January 29, 2012, 05:39:32 PM »
Quote from: FurryNutz on January 28, 2012, 01:29:45 PM
I would check the status/ device info page of the router to see if there are any connected devices in this ranges.
These entries are common as the router is just reporting what its doing. The firewall is working.
I would also scan for any malware and viruses on all pcs to be sure.

As always, thanks for your assistance. I am not seeing any connections other than the PCs and devices I would expect to see.

I have run the virus scanners on all computers and they have all come up clean.
Logged