Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[rar2667]

All,
I have a AcuLink temperature sensor on my network which is not communicating out to Acu-Rite. In the logs of my DIR-6555 I get the following message:
"Blocked outgoing TCP packet from 192.168.0.191:1025 to 60.9.0.0:80 as RST:ACK received but there is no active connection".
The 60.9.0.0 address is in China so I am concerned that there is some nefarious activity. Does it mean that the China IP issued a RST to my AcuLink device, or did my AcuuLink device initiate communication with the China IP?

Can I block that whole 60.x.x.x subnet incoming?

Any help interpreting the message would be appreciated.
Thanks,
Andy

[FurryNutz]

Link>Welcome!

• What Hardware version is your router? Look at sticker under the router case.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

If your device has a service that it need to contact, then I presume the Mfr has a service that is handling communications. I'd contact the Mfr of the device and ask them if this IP address if valid and what your experiencing. If it's valid, you might test the device out and use a IP address reservation ON the router for this one device, then place this IP address in the 655s DMZ just to test.

What is the current Firewall Endpoint settings?

[rar2667]

My hardware version is 4A and I just updated the firmware this morning to 1.37NA. I have not done a factory reset yet, so may need to do that tonight.
I am in the US (Arkansas). Comcast is my ISP...not sure of the modem model.

I spoke to the manufacturer and the 60.9.0.0 IP is unknown to them. Their device should be communicating to 174.143.48.163.
I mainly need to know if the RST:ACK received message means that the 60.9.0.0 initiated the communication or did my AcuLink device?

[FurryNutz]

Well the log said it was block as an outgoing packet from IP .191. Is this the address of your sensor?

[rar2667]

Yes .191 is my temp sensor. I just wondered if the 60.9.0.0 IP might have started the handshake and that was why .191 was trying to answer?
The manufacturer has no explanation for why their device would try to contact the China IP.

[FurryNutz]

You might set up a reservation ON the router for the sensor and give a new IP address. Something other than .191 then see if it happens again.

Possible the sensor was trying to ACK and the router is just catching it.

[rar2667]

Thanks for the help...I'll give it a go.

[FurryNutz]

Let us know how it goes.