• February 24, 2025, 03:38:47 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: SPI problems how to solve ?  (Read 4260 times)

Raz0r-B

  • Level 1 Member
  • *
  • Posts: 16
SPI problems how to solve ?
« on: December 10, 2009, 12:34:36 PM »
Since i installed this latest firmware for my router
http://forums.dlink.com/index.php?topic=9234.0

I have a router log full of this:
Quote
Oct 20 16:02:48     notice     Blocked incoming TCP Ack packet from 1.1.1.1:52222 to 2.2.2.2:53460 with unexpected sequence
Oct 20 16:02:22     notice     Blocked incoming TCP Ack packet from 1.1.1.1:52222 to 2.2.2.2:53460 with unexpected sequence
Oct 20 16:02:11     notice     Blocked incoming TCP Ack packet from 1.1.1.1:52222 to 2.2.2.2:53520 with unexpected sequence
Oct 20 16:02:10     notice     Blocked incoming TCP Ack packet from 1.1.1.1:52222 to 2.2.2.2:53416 with unexpected sequence
Oct 20 16:02:09     notice     Blocked incoming TCP Ack packet from 1.1.1.1:52222 to 2.2.2.2:53460 with unexpected sequence

I know this traffic can be trusted but how to filter this as allowd traffic?

I know i can disable SPI but that is the easy way.
Logged

th

  • Level 1 Member
  • *
  • Posts: 6
Re: SPI problems how to solve ?
« Reply #1 on: December 10, 2009, 12:46:44 PM »
Quote from: Raz0r-B on December 10, 2009, 12:34:36 PM
I know i can disable SPI but that is the easy way.
disbling SPI did not help in my case. the disconnects after 8min (irc, skype & co) still happened, even with all special router features disabled.
Logged

hachi

  • Level 1 Member
  • *
  • Posts: 9
Re: SPI problems how to solve ?
« Reply #2 on: December 23, 2009, 05:41:03 PM »
just set up an inbound filter to allow that address:

http://192.168.0.1/Advanced/Inbound_Filter.shtml

but you might still need to forward the ip to whatever you want them to reach, because depending on your nat settings it might get blocked anyway, if they have no previously open connection that makes sense to the nat table.
Logged