Firewall blocking 10.68.16.1

[Nutty]

I recieved a new gateway router from Belkin recently to replace the one that keeps crashing. Everything works fine with it.

The firewall log on this one actually does report things, and it has quite a few entries identical to this one;

Sat Feb 14 18:26:04 2004 1 Blocked by DoS protection 10.68.16.1

Isn't 10.68.16.1 the IP address of the STB? It also comes up with 64.4.12.201 which is a hotmail address presumably something to do with MSM.

Anyway, anyone know why that 10.68.... ip is being blocked by my firewall soo much, or why its there in the 1st place?

Originally Posted by Nutty

I recieved a new gateway router from Belkin recently to replace the one that keeps crashing. Everything works fine with it.

The firewall log on this one actually does report things, and it has quite a few entries identical to this one;

Sat Feb 14 18:26:04 2004 1 Blocked by DoS protection 10.68.16.1

Isn't 10.68.16.1 the IP address of the STB? It also comes up with 64.4.12.201 which is a hotmail address presumably something to do with MSM.

Anyway, anyone know why that 10.68.... ip is being blocked by my firewall soo much, or why its there in the 1st place?

hmm

TraceRoute Report
on 14/02/04 at 19:46:37

Tracing route to 10.68.16.1 over a maximum of 25 hops:

#1 ***.**.***.*** [Unavailable]: TTL expired in transit, 13 ms
#2 80.4.47.225 [nott-t2cam1-b-ge-wan51-128.inet.ntl.com]: TTL expired in transit, 14 ms
#3 10.68.16.1 [Unavailable]: Echo reply, 37 ms

Statistics: Out: 3; In: 3; Loss: 0%; Times(min/avg/max): 13/21/37

- getting there in 3 hops would suggest it's not your STB, but an address inside the NTL network - is it possible you are blocking DHCP requests?

10.x.x.x addresses are private network addresses - they don't exist on the "proper" internet.

On the NTL network I think SACM's have both a private and public IP address allocated, not sure how STB BB works but I would guess something similar.

If you do a tracert to somewhere (like ntl.com) you will normally see the gateway for your connections private address as the first or second hop (depending on what set-up you have at home).

Hope this hasn't confused you - I don't think I'm explaining it very well as my brain is on strike tonight.

[Ignition]

Hiya

That IP address is used by STB's as their default gateway if they are in the same IP range as that one. It's not going to affect your PC in any way, as your PC has no visibility of that address really, your PC uses a public address, it's only used by your STB to communicate with DHCP servers, TFTP, time of day.

It's probably just router is seeing broadcast traffic and getting a bit upset about it, won't harm your system in any way, nothing to worry about whether it gets through or not, just part of the background noise on the Internet

ah - I see my ploy of posting in ignorance so the guys who really know what they are on about, come in & help, has worked

- thanks Guys, still learning about all this stuff.

[Ignition]

No problem, if I ever stop learning about this stuff I'll find myself another industry to work in!

[Stuartbe]

Originally Posted by JustAnotherN00b

No problem, if I ever stop learning about this stuff I'll find myself another industry to work in!

The day you stop learning is the day you should pack in working in IT...

Nice one for getting the belkin gear Nutty - Its good stuff.

[Nutty]

Cheers guys.

Regarding Belkin, I'm in a mixed mind about them.

I was using the 4 port cable/dsl gateway router by them, but it was constantly locking up and crashing. Counterstrike server browser would crash it every time. They even sent me some unreleased firmware to try, which did nothing. Eventually I said send me a new one that works, or give me my money back. So they sent me the Wireless version which costs a bit more. And it works great.

On one hand I'm annoyed that the previous router was soo flakey. But it could've been a one-off broken one so I dunno. Tech support was okay, they've sent me a new one which is good, but at the same time they were supposed to give me a reference number to send the old one back with, but I've heard nothing. I reckon I shoulda had a couple of wireless PCI adaptors too for all the hassle..

...but I digress.

I also use Norton Firewall on top to restrict what programs send data out, but I'm convinced they're purposefully breaking it with each update to make my buy the latest version. Still using the 2002 version, and things keep going wrong with it after each live-update. Used to work perfect when I got it.. gah..

Originally Posted by Nutty

Cheers guys.

Regarding Belkin, I'm in a mixed mind about them.

I was using the 4 port cable/dsl gateway router by them, but it was constantly locking up and crashing. Counterstrike server browser would crash it every time. They even sent me some unreleased firmware to try, which did nothing. Eventually I said send me a new one that works, or give me my money back. So they sent me the Wireless version which costs a bit more. And it works great.

On one hand I'm annoyed that the previous router was soo flakey. But it could've been a one-off broken one so I dunno. Tech support was okay, they've sent me a new one which is good, but at the same time they were supposed to give me a reference number to send the old one back with, but I've heard nothing. I reckon I shoulda had a couple of wireless PCI adaptors too for all the hassle..

...but I digress.

I like the belkin stuff. I've got a 4 port router, a wireless access point and a laptop wireless card. No problems with any of it.

[Stuartbe]

Originally Posted by Nutty

Cheers guys.

Regarding Belkin, I'm in a mixed mind about them.

I was using the 4 port cable/dsl gateway router by them, but it was constantly locking up and crashing. Counterstrike server browser would crash it every time. They even sent me some unreleased firmware to try, which did nothing. Eventually I said send me a new one that works, or give me my money back. So they sent me the Wireless version which costs a bit more. And it works great.

On one hand I'm annoyed that the previous router was soo flakey. But it could've been a one-off broken one so I dunno. Tech support was okay, they've sent me a new one which is good, but at the same time they were supposed to give me a reference number to send the old one back with, but I've heard nothing. I reckon I shoulda had a couple of wireless PCI adaptors too for all the hassle..

...but I digress.

I also use Norton Firewall on top to restrict what programs send data out, but I'm convinced they're purposefully breaking it with each update to make my buy the latest version. Still using the 2002 version, and things keep going wrong with it after each live-update. Used to work perfect when I got it.. gah..

Software firewalls behind a nat are not a good idea unless you change the config... You dont want the firewall to filter any trafic apart from apps....

Uninstall norton and try zone alarm... Set the security slider to the lowest settings on both sides and it will just give app level access control...

HTH

BTW - I have two Belkin access points - 1 connected to the lan the other as a bridge to extend the range and I have had no problems (using a 54 pcmcia card now as the wife has kicked me off the pc )

Originally Posted by stuartbe

Software firewalls behind a nat are not a good idea unless you change the config... You dont want the firewall to filter any trafic apart from apps....

Uninstall norton and try zone alarm... Set the security slider to the lowest settings on both sides and it will just give app level access control...

HTH

BTW - I have two Belkin access points - 1 connected to the lan the other as a bridge to extend the range and I have had no problems (using a 54 pcmcia card now as the wife has kicked me off the pc )

Model No F5D7010 ? I'm using that myself at the moment.

[Stuartbe]

Originally Posted by Proppinupthebar

Model No F5D7010 ? I'm using that myself at the moment.

Yep -

Just dont try using it to log into a domain - You have to start the connection software via a sheduled task when windows starts in 2k.....Daft !!

[Nutty]

Software firewalls behind a nat are not a good idea unless you change the config... You dont want the firewall to filter any trafic apart from apps....

How so? I dont have any problems. I also use Norton for the parental web filtering too. I doubt zone alarm provides this? Its not just firewall stuff, theres also privacy control and activex blocking, and script blocking, and ad blocking which also works fine behind the nat router.

[Stuartbe]

Originally Posted by Nutty

How so? I dont have any problems. I also use Norton for the parental web filtering too. I doubt zone alarm provides this? Its not just firewall stuff, theres also privacy control and activex blocking, and script blocking, and ad blocking which also works fine behind the nat router.

When the nat re-writes packets these can be seen by the firewall as bad trafic... You wont have this problem if you have configured your local lan as a trusted network though - NB this is the same as having app level control as all packets will be allowed...

There is no point having a firewall behind a nat IMO...... Waste or resorces.... i do recomend that a firewall is run for app control but it should be set to allow local trafic....


Firewalls behind a nat can cause a multitude of problems !!

[Nutty]

Yeah I have 192.168.2.* set as trusted machines. Though as I said I use the program for much more than just packet blocking.