RE: Home firewall Hits

["Preston, Tony" <Tony.Preston () acs-inc com>]

Thanks to everyone for answering my question.   It does appear that I had
turned on the logging from the linksys router.  I will chalk this up to a
learning experience, maybe I shouldn't be so paranoid...:)



-----Original Message-----
From: rjemckay () verizon net [mailto:rjemckay () verizon net] 
Sent: Monday, November 03, 2003 11:05 PM
To: Preston, Tony; 'security-basics () securityfocus com'
Subject: Re: Home firewall Hits

Tony - check the log tab in your Linksys router setup, it probably has
logging enabled.  If it is it will send oout/broadcast SNMP packets with log
information obtained at the router.  I'm assuming that you're runing your
router as a NAT box and so much if not all of the inbound traffic from the
internet is being blocked at the router (unless you've enable various
services).  If you want to check or view the log information from the router
I would suggest using WallWatcher and WallreViewer - both packages are free.
WallWatcher will show give you a nice readout of the SNMP logs generated by
your router, WallReViewer gives you a nice analysis of the logs over a
period of time.  Also, you will need to determine what internal IP address
you want the router to broadcast to - if you want it to broadcast to all
computers on your internal network use 255 in the last octet or put a
specific computer IP address.  

Wall Watcher and WallReViewer can be found at 
http://www.sonic.net/~sraaii/wallwatcher/Index.html

rm
 

---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to 
simplify the management and deployment of PGP and reduce overall PGP costs 
by up to 80%.
FREE WHITEPAPER & 30 Day Trial - 
http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027 
----------------------------------------------------------------------------