Kerio PF 4: I need help

  • Thread starter Thread starter MLC
  • Start date Start date
M

MLC

I asked this in comp.security.firewalls but no one answered, so now I hope
in your help :-)

I see in the NIPS (Network Intrusion Detection and Prevention System) logs
that my ISP is blocked as an attack source, with this description:
BAD-TRAFFIC IP Proto 103 (PIM)
and with "medium" priority.

There is a log for this every 30 seconds!

I don't know what it means and I'm wondering if I should allow it (allowing
all the intrusions of "medium" priority), because recently I have many
disconnections from my dial-up, it seems I can't keep the connection alive
for more than a few minutes, and it's veeeery sloooow.

What do you think?
 
MLC ([email protected]) schrieb/wrote:
I see in the NIPS (Network Intrusion Detection and Prevention
System) logs that my ISP is blocked as an attack source, with this
description: BAD-TRAFFIC IP Proto 103 (PIM)
and with "medium" priority.

There is a log for this every 30 seconds!

I don't know what it means
Click to expand...

Why not ask your ISP?
 
giovedì 25 agosto 2005 Andreas Kaestner ha scritto:
Why not ask your ISP?
Click to expand...

Tried several times today: all I got was an answering machine saying that
they're all busy...
 
not-for- said:
At $39 for a single user license Kerio 2.15 is definitely not freeware.

Tony
Click to expand...

Wrong. Kerio 2.1.5 is definitely free. Although no longer supported in
any way..
 
I don't know what it means and I'm wondering if I should allow it (allowing
all the intrusions of "medium" priority), because recently I have many
disconnections from my dial-up, it seems I can't keep the connection alive
for more than a few minutes, and it's veeeery sloooow.

What do you think?
Click to expand...

the low speed of your often broken connection doesn't depend on the
requests to your system ( which could be anything , but i guess are
netbiospackets ) .

first learn a little to controll traffic on your machine , then try
another firewall ( my advice is jetico personal firewall ) , another
provider and another modem . now you should be fine !
 
Agreed. Kerio 4 is garbage.
Click to expand...

Elaich, I blew out my DSL "modem" and had to replace it. Kerio 2.15 doesn't
like it. Any idea where I should look in the logfile to see where Kerio is
blocking the new modem?
 
Elaich, I blew out my DSL "modem" and had to replace it. Kerio 2.15
doesn't like it. Any idea where I should look in the logfile to see
where Kerio is blocking the new modem?
Click to expand...

Kerio (or any other firewall I know of) doesn't block modems. It blocks
programs and processes. Most likely you don't have the proper driver for
the new modem, or it didn't install properly.
 
MLC said:
I asked this in comp.security.firewalls but no one answered, so now I
hope in your help :-)

I see in the NIPS (Network Intrusion Detection and Prevention System)
logs that my ISP is blocked as an attack source, with this
description: BAD-TRAFFIC IP Proto 103 (PIM)
and with "medium" priority.

There is a log for this every 30 seconds!
Click to expand...
I don't know what it means and I'm wondering if I should allow it
(allowing all the intrusions of "medium" priority), because recently I
have many disconnections from my dial-up, it seems I can't keep the
connection alive for more than a few minutes, and it's veeeery
sloooow.

What do you think?
Click to expand...

That's why I love the idea of IDS rules in personal firewalls. They tend
to send cryptic messages that are beyond the ken of most homeusers.

Hard to say what "BAD-TRAFFIC IP Proto 103 (PIM)" is without knowing what
network packets are actually triggering this rule. Have you asked the
Kerio people?
 
Kerio (or any other firewall I know of) doesn't block modems. It blocks
programs and processes. Most likely you don't have the proper driver for
the new modem, or it didn't install properly.
Click to expand...

I think your right even though it works like a champ. Kerio can block
TCP/IP though and that's what I think is happening. Why would an improper
driver be the cause?
 
venerdì 26 agosto 2005 Aaron ha scritto:
That's why I love the idea of IDS rules in personal firewalls. They tend
to send cryptic messages that are beyond the ken of most homeusers.
Click to expand...

Really :-\
Hard to say what "BAD-TRAFFIC IP Proto 103 (PIM)" is without knowing what
network packets are actually triggering this rule. Have you asked the
Kerio people?
Click to expand...

I've just done it, after having read this your post.
Let's hope.
 
I think your right even though it works like a champ. Kerio can block
TCP/IP though and that's what I think is happening. Why would an improper
driver be the cause?
Click to expand...

Kerio trashed my computer quite thoroughly.
 
Kerio trashed my computer quite thoroughly.
Click to expand...

Which Kerio? I've never heard of Kerio 2 trashing anybody's computer. When
I tried Kerio 4, everything started running like molasses.
 
Back
Top