Igmp
 

Hi, do I need IGMP enabled on my router for virgin media? its currently off.

Re: Igmp
 

No.

Re: Igmp
 

without going into detail (you can google igmp if you want) I can quite confidently say that you are never going to use igmp

Re: Igmp
 

apologies for the late reply, thanks.

what about WAN Ping Blocking - Block ICMP Ping? I'm a VM customer, will me blocking ICMP pings affect the way VM communicates with my modem/router etc.? will it cause a problem?

I'm trying to secure my set up because of the following, and because its become known to me that there has been activity of sort going on before I done my best to stop it which resulted in my router firewall blocking the events below....

my router firewall log:

05/26/2011 03:25:24 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/26/2011 03:19:53 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/26/2011 02:34:43 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/26/2011 02:32:04 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/25/2011 18:06:38 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/25/2011 09:52:55 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/24/2011 16:44:23 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/24/2011 08:39:08 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/23/2011 15:28:25 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/23/2011 09:01:22 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/22/2011 15:47:01 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/22/2011 09:47:04 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/21/2011 19:28:09 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/21/2011 10:06:37 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/20/2011 19:35:54 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)

I don't down or up torrents.

Re: Igmp
 

you can disabled it without it having any adverse affects on your connectivity, I have done it on my router. All it does it stop people from being able to ping you which can prevent DOS attacks. All it will mean though is that if anyone tries to ping you to assess your connectivity it will look like your connection is down. Like if you think you are having problems and ping www.google.com to test your connection, if it comes back as destination unreachable or a timeout, you would think you had problems but it might just mean that google are blocking icmp echo requests. This is what people would get if they tried to ping you.

Re: Igmp
 

Wrong. It doesn't prevent DOS attacks. All it does as you say is make your connection appear down.

Don't worry about it. The IP's in your log are local network IP's and probably the router being a bit over sensitive.

Re: Igmp
 

if you disable icmp echo requests your router with automatically drop the packets which will stop you from being pinged to death

Re: Igmp
 

Rather than being paranoid the question you should be asking is "Why would someone want to ping me to death? Who've I upset?"

If the answer to that is negative there is no real need to worry.

Re: Igmp
 

Thanks all.

What am I suppose to do about these smurf attacks? I think I know 99.99% whos doing this and it is all about "consuming the system's available bandwidth".

Heres my log so far today,

05/26/2011 17:12:36 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/26/2011 13:31:29 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)
05/26/2011 09:08:06 **Smurf** 0.0.0.0, 4096->> 192.168.2.1, 53 (from LAN1 Inbound)

I just logged onto my PC at 5.12pm and the firewall blocked something straight away. Is the person I think doing this still able to use my connection?

I've scanned my systems connected with nod32, malwarebytes, super antispyware, systweaks system protector... so many programs, they all find nothing. By the way, all these softwares are not running at the same time, I only have nod32 running for real time and malwarebytes as on-demand.

Re: Igmp
 

anyone got anything to offer as in advice? I know theres no clear fix but I've heard that the new superhubs VM supply are hard to clone, any truth in that? Although my modem seems ok'ish, it does seem like someone is trying to clone it would the superhub stop attempts of cloning of my services? if so, which superhub so I go for as many thread suggest some models are not good.

Re: Igmp
 

interesting. So what does someone trying to clone your modem look like then? They either do or they dont, and you either have network access or you dont. It isnt something you can see or feel through degradation or performance.

Re: Igmp
 

I understand but the icmp attacks if successful can eat up bandwidth. The statement above confirms that and past experience of my service/broadband was cloned before when I wasn't linked to a router. 1 system was linked to the modem directly, the av installed at the time wasn't the best and the firewall was flawed as it was set to allow all in from set connection instead of being set up correctly along with decent av/spyware monitors. The attempts to clone then were sucessful which did have an impact on my bandwidth/bb performance. My modem was then replaced after VM looked into it, I linked it up to a router and ever since I get constant attempts of these smurfs. I've cleaned all my systems with various scanners, nothing found.

Re: Igmp
 

I apologise first if what I say offends you.

You are a paranoid idiot who seems to have Gooled without understanding what you have found.

The adage "a little knowledge is dangerous" comes to mind.

Again, sorry if my post offends.

Re: Igmp
 

No need to apologise, I admit I'm paranoid and I have little knowledge. I'm speaking from past experience and google search, it might not even be cloning - attempts to get online via my service details. In the case of it not being anything to do with cloning.... I apologise.

Re: Igmp
 

No need to apologise at all. Just stop worrying about nothing.

Re: Igmp
 

nobody is cloning your mac address. Your mac address is used to identify yourself to the ubr and it is unique. If someone had cloned your mac and was using it then you wouldnt notice your pc slow down, your pc would be fine but you just wouldnt be able to connect to the internet because someone else is already connected using your info. The only time you might notice a degradation in peformance on your pc is if you had a virus or something else getting up to mischief and your pc was being used as part of a botnet or something, buuuuuuuuuuuuuuuuuut, your security suite would show this up. If you have got av software installed, update to date and it is saying everything is cool then dont worry. If your pc is slowed down it will be because of the av software doing realtime monitoring and stuff like that. Things will be going on in the background which you cant see. Norton (one of the more popular) is one of the worst for impact on system peformance.

Take a chill pill dude :Peaceman:

Re: Igmp
 

You do know that could be aimed at a few people on this forum :LOL:

Re: Igmp
 

Especially Warrington fans!!https://www.cableforum.co.uk/images/local/2011/05/1.gif

https://www.cableforum.co.uk/images/...2011/05/12.jpg

https://www.cableforum.co.uk/images/local/2015/12/3.gif

Re: Igmp
 

Its going to be one hell of a game in the quarter final :LOL:

You going ?

Re: Igmp
 

Have the beer ordered already!

Re: Igmp
 

I have my tickets already. When your there look at the south stand and i will be one of those laughing at you when we beat you AGAIN :LOL:

Re: Igmp
 

That post couid well come back to haunt you!

Re: Igmp
 

Indeed :)

However based on our form to date i feel you are not going to Wembley this year.

Re: Igmp
 

We'll see!:D

Re: Igmp
 

[img]Download Failed (1)[/img]

Re: Igmp
 

:LOL:

We have you next month at home.

Re: Igmp
 

http://community.virginmedia.com/t5/.../507813#M80077

ladies and gentlemen prepare for your mind to be blown

Re: Igmp
 

That guy in that thread is in terminal tin foil hat territory. Its a definite case of a little knowledge turns you into Mr know it all when infact you know nothing at all.

Re: Igmp
 

Notice the username :-)

Re: Igmp
 

Well :-)

Re: Igmp
 

thenry if you are still reading this thread you need to listen to my following words of wisdom:

When you are ill and go to the hospital you listen to the doctor and do what he says even if you dont understand him because you trust him and trust that he knows what he is talking about. The same applies here. Although some people might behave like children on this forum, there are some very clever and very experienced IT professionals who belong to this forum and you need to trust that when people come together, both on here and on the VM forums, and tell you that you have got nothing to worry, you need to believe what they say.

Re: Igmp
 

Wise Words :clap:

Re: Igmp
 

Again I understand and apologize. That long thread is posted by me, not particularly pleased with what I've had to write but this is doing my nut! Although you've told me to forget it, it is annoying to have these constant attacks. By the way whats been posted in here by myself has also been posted on VMs official forum - http://community.virginmedia.com/t5/...ks/td-p/520353

An IP change might stop this from happening, I'm not sure. I'll wait and see what VM say.

Re: Igmp
 

if you believe you are the victim of smurf attacks then you can do two things:

1) google smurf attacks and you'll find plenty of articles telling you how they can be prevented

2) get a sniffer prog like wireshark and have a look at the traffic traversing your lan and find out if anyone else is connected

Re: Igmp
 

Look at the previous link i posted read through it all then you will just realise this guy is not accepting any answers he is either really mentally ill or a troll

Re: Igmp
 

probably both kalleh.

General Maximus I'll look through more google results and get wireshark installed + try to learn how that works too while I'm at it. cheers

edit: google result - last post - http://forums.anandtech.com/showthread.php?t=1957128 - pretty much sums it up :mad: