ADSL router keeps disconnecting

[Bifta]

I've got a Belkin 54G router and ADSL from One.tel, every few hours the router keeps disconnecting for some reason, when I look in the security log I get this around the time of the event:

12.09.2004 08:44:05 PPPoE stop
12.09.2004 08:44:05 ATM1 stop PPP
12.09.2004 08:42:26 **IP Spoofing** 127.0.0.1, 80->> xx.xx.xx.xx
, 1260 (from ATM1 Inbound)
12.09.2004 07:59:18 **IP Spoofing** 127.0.0.1, 80->>

the IP address it lists is my IP address but my machine wasn't on at the time this happened.

It's getting really annoying now, just wondered if it's likely to be a problem with one.tel (who I'm ditching in a few weeks while ADSL through another provider is activated on my spare line) or my router.

[Richard M]

Sounds like a worm spoofing it's IP as loopback(127.0.0.1) and trying to attack port 80 (web server).

[Bifta]

Originally Posted by Richard M

Sounds like a worm spoofing it's IP as loopback(127.0.0.1) and trying to attack port 80 (web server).

I'm not sure, see it uses port 80 for adminstration via a browser and the IP address it listed was mine.

[Richard M]

Mystery to me, I do know that it's almost impossible for a Windows machine to spoof an IP though (easy on Linux).
It is possible that a machine on your network is doing this or maybe the modem?

[dilli-theclaw]

Originally Posted by Bifta

I've got a Belkin 54G router and ADSL from One.tel, every few hours the router keeps disconnecting for some reason, when I look in the security log I get this around the time of the event:

12.09.2004 08:44:05 PPPoE stop
12.09.2004 08:44:05 ATM1 stop PPP
12.09.2004 08:42:26 **IP Spoofing** 127.0.0.1, 80->> xx.xx.xx.xx
, 1260 (from ATM1 Inbound)
12.09.2004 07:59:18 **IP Spoofing** 127.0.0.1, 80->>

the IP address it lists is my IP address but my machine wasn't on at the time this happened.

It's getting really annoying now, just wondered if it's likely to be a problem with one.tel (who I'm ditching in a few weeks while ADSL through another provider is activated on my spare line) or my router.

Did you sort this out?

I ask because my belkin 54g adsl wireless router/modem has started doing this as well...

When I log into the security log it's got hundreds of these spoofing reports..

AND it resets itself almost exactly at midnight...

[dilli-theclaw]

I'm just bumping this - because I just checked my logs and found another hundred or more of these reports

It's really irritating.

[altis]

Traffic from 127.0.0.1 is not uncommon!

http://www.cableforum.co.uk/board/showthread.php?t=6938

[SOSAGES]

in my experience ADSL and routers are a nightmare some just dont hold the signal well enough i have a linksys one at work thats a complete nightmare swapped it with a dlink one from a work buddy and he says its naff at his house as well yet the dlink one works fine i went through about 4 routers to find one that could stay connected - some wouldnt even connect

[dilli-theclaw]

Originally Posted by altis

Traffic from 127.0.0.1 is not uncommon!

http://www.cableforum.co.uk/board/showthread.php?t=6938

Thanks for that

It seems as long as I clear out the log it stays connected ok.

[dilli-theclaw]

Originally Posted by SOSAGES

in my experience ADSL and routers are a nightmare some just dont hold the signal well enough i have a linksys one at work thats a complete nightmare swapped it with a dlink one from a work buddy and he says its naff at his house as well yet the dlink one works fine i went through about 4 routers to find one that could stay connected - some wouldnt even connect

Before I was getting these log entrys it was as steady as a rock.

As I've said in my other reply as long as I keep my log reletively clear it stays connected - so may it's got a limit on what it can hold in the log before it has to reset itself.