Can anyone help - Denial of service

TakeCare · 12-12-2009, 09:55

Morning,

Hope I have this in the right place.
For a while now I keep losing connection and yet diagnostics say no problems with pc.
My Panda log shows this many times...

icmp echo request - blocked
denial of service.

A friend reckoned I should use whatismyipaddress as I use a router,which I did and used again after restarting. Both addresses were the same and says..

ISP telewest broadband
Proxy - none detected
type cable/DSL.

This is driving me potty.....any advice please??

Thx in advance.

Raistlin · 12-12-2009, 10:01

Does it say what IP address the ICMP Echo Request is coming from that is being blocked?

If you reboot the PC does it get a connection back again?

If you reboot the modem do you get a connection again?

If you take the router out of the equation and connect directly to the modem (remember that you'll need to power cycle all the devices - in other words turn them all off, connect them up, then turn on cable modem, router, PC, in that order, leaving a few minutes between each one) do you get a stable connection that way?

TakeCare · 12-12-2009, 10:17

Hi Rob,

Thanks for talking in plain language and not techy talk

It says remote IP 192.168.1.2
Denial of service is 192.168.1.254 ( assume ok to post these numbers? )

I dont always have to reboot. When I run diagnositcs, always says no probs with pc, and if then click to close its box, the page usually then appears.

Thanks

Raistlin · 12-12-2009, 10:24

Yeah, those numbers are fine to post.

Go into your Panda software setup and see if there's a setting in there to block either a) 'pings', b) 'unsolicited pings', or c) ICMP echo request, or d) something similar.

While you're poking around could you go to 'Start' > 'Run', and then in the window that opens type:

Code:

cmd

Then hit Ok.

A black window with white text (probably) will pop up, when it does type:

Code:

ipconfig

Then hit return.

You should get a load of information which will include at least one line that starts "IPv4 Address" - is that address 192.168.1.2 or something different?

Dai · 12-12-2009, 10:26

Yes it's safe to post 192... IPs as they are internal to your network only.
The 192.168.1.2 address could be your router or your PC.
Both the IPs are internal ie within your home setup so whatever the reason it's not an attack from outside.

Raistlin · 12-12-2009, 10:29

I'm guessing (hence my questions above) that the router is pinging his computer to check it's still up and running, and that his software firewall (Panda) is blocking it, at that point the router will probably stop communicating with the PC. When the diagnostic checker is run the first thing it does is try to establish contact with the router, thus telling the router that the PC is up and running, and thereby restoring the connection.....maybe

---------- Post added at 11:29 ---------- Previous post was at 11:28 ----------

Forgot to ask, are you running the Windows firewall AND Panda?

TakeCare · 12-12-2009, 10:39

Found the IPv4 192.168.1.1 last number different to what I posted above.

Been in Panda but cant find what you mentioned

---------- Post added at 11:35 ---------- Previous post was at 11:33 ----------

Panda firewall is on. How do I check about windows one in Vista?

---------- Post added at 11:39 ---------- Previous post was at 11:35 ----------

Found windows firewall details, it is off. Just Panda one on

Dai · 12-12-2009, 10:43

I'm not familiar with the Panda firewall but I would expect that there is an option somewhere to define a local (trusted) IP range.

If that range is set as 192.168.1.0 to 192.168.1.255 then all local traffic should be permitted and the problem hopefully will go away.

@Rob M - I'd be interested to try a telnet to that 254 IP and see if anything responds.

Raistlin · 12-12-2009, 10:46

I would imagine (given that the OP) seems to be on x.1 that the router is probably on x.254, which would seem to support my theory.

I would suggest at this point turning the Vista firewall back on, and disabling the firewall portion of Panda completely (obviously leave the AV component running for now).

TakeCare · 12-12-2009, 10:52

Okay, I will try as you suggest.Thanks to you both for your help.

Just bought a case of Stella earlier ( 1/2 price in Morrisons ). A few got your names on if ever passing

Raistlin · 12-12-2009, 10:55

Sounds good to me, I'll be round in about 10 minutes.

Run with Panda off (and the Vista firewall on) for a while and see how you get on. The Vista one should be able to work out what your internal network addressings are automagically and so it should allow proper communication with the router (I take it that is the router on 192.168.1.254?).