Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / IP Spoofing

Author
Message
CJD
18
Years of Service
User Offline
Joined: 15th Mar 2006
Location:
Posted: 3rd Jun 2007 12:58
Link
Hi, my router keeps alerting me to an ip spoofing attack.

Quote: "No. Time Source IP Destination IP Note
1|01/01/2000 15:31:20 |192.168.1.13:6890 |84.13.x.x:11594 |ATTACK
ip spoofing - WAN TCP

End of Alert"


(I removed some of the address as im a bit security conscious)

Im using the routers hardware firewall with only some basic port forwarding, along with Windows Firewall (disabled my main firewall for the moment because of other problems).

Does anyone know how to prevent these attacks? Will using a good software firewall prevent them?

Thanks for any help.

...
Back to top
Profile PM
Phaelax
DBPro Master
21
Years of Service
User Offline
Joined: 16th Apr 2003
Location: Metropia
Posted: 4th Jun 2007 00:12
Link
a software firewall won't stop the alerts on the hardware, as the attack will hit the router before reaching a computer's software firewall.


Back to top
Profile PM Email Website
Zappo
Valued Member
20
Years of Service
User Offline
Joined: 27th Oct 2004
Location: In the post
Posted: 4th Jun 2007 01:33 Edited at: 4th Jun 2007 01:35
Link
The source IP address is a private address (192.168.x.x) which makes it unlikely to have come from outside. Do you have two devices on your local network which have accidentally been set up with the same IP address, i.e. a confliction? That would be my first guess.

Edit: OR, if its a wireless router someone outside could be connecting to it and setting their IP address as your IP address. Remember, WAP encryption can be easily broken now.
Back to top
Profile PM Website
CJD
18
Years of Service
User Offline
Joined: 15th Mar 2006
Location:
Posted: 4th Jun 2007 12:55
Link
Well i don't think it could be from either pc (i only have 2 connected to the network). Reasons being they are set to assign an IP automatically and the ip pool starts at 192.168.1.33. Plus they are rarely on at the same time.

Also i do have a wireless router but i live in the middle of nowhere, my nearest neighbours are certainly not computer literate!

I've left my router off for the night so now have a new external IP address, i'll wait and see if i get any more alerts.

...
Back to top
Profile PM
GatorHex
19
Years of Service
User Offline
Joined: 5th Apr 2005
Location: Gunchester, UK
Posted: 4th Jun 2007 16:58 Edited at: 4th Jun 2007 16:58
Link
The fact your Router caught and reported the error probably means it blocked it and you shouldn't worry too much about it.

Make sure you have set your WPA-PSK encryption password or make an approved MAC address list or else with DHCP (auto IP allocation) anyone could rock up outside you house in a car and access your network.

War MMORPG http://forum.thegamecreators.com/?m=forum_view&t=106577&b=8
DinoHunter http://forum.thegamecreators.com/?m=forum_view&t=98385&b=8
Back to top
Profile PM Website
piXX3D
17
Years of Service
User Offline
Joined: 27th Mar 2007
Location: Nowhere
Posted: 4th Jun 2007 22:45
Link
Think about it: If it says IP Spoofing, then perhaps someone's trying to spoof your IP?

Don't just assume anything nasty is a bug. Although most nasty things are. That's what Linux is for I tried to install it and it broke my hard drive

www.ciphersoftware.co.uk

MindLife - v1.0: At the forums: http://forum.thegamecreators.com/?m=forum_view&t=107284&b=25
Back to top
Profile PM Website
Back to top

Login to post a reply

Server time is: 2024-11-18 17:43:20
Your offset time is: 2024-11-18 17:43:20