focher 15 Posted July 20, 2011 (edited) Under beta 82901, the behaviour is still present and even "worse" (because I don't know whether the behaviour is as-expected for some purpose). I now see 2 different UDP sessions, one runs at almost 70kbps and the other at 53kbps. Both are sending packets with the server details. My money is on the theory that this is Gamespy traffic and those IP addresses are providing server browser services for Gamespy. Edited July 20, 2011 by Focher Share this post Link to post Share on other sites
Dwarden 1125 Posted July 20, 2011 on 66.150.214.8 is some ventrilo server but i assume that's coincidence please try run this http://support.kaspersky.com/downloads/utils/tdsskiller.exe scan the system, tell us if comes out clean (reveals TDL-3 and TDL-4 rootkits) then scan the system with http://public.avast.com/~gmerek/aswMBR.exe which may reveal some more Share this post Link to post Share on other sites
Rexxenexx 0 Posted July 20, 2011 (edited) There are comps connected to the dedicated server tasking arma2server.exe "active connections". Nobody is connected except myself, which I can see in the active connections plus master server connections. But these tasking connections seem like random servers used to try and DoS my dedicated server. It may be something legit but I never seen it before. Ideas? EDIT: Here's one. UDP IN source 174.88.65.129:27005 destination x.x.x.x:2302 Bytes In 87.5KB{421 B/s} Bytes Out Blah it went away but it was about 1.4MB already I think it has something to do with people when they disconnect. One JUST joined...then disconnected. EDIT: Another one. UDP IN source 124.197.26.174:27005 destination x.x.x.x:2302 Bytes In 4.4MB{4.0 KB/s} Bytes Out 76.7MB{69.5 KB/s} Edited July 20, 2011 by Rexxenexx Share this post Link to post Share on other sites
focher 15 Posted July 20, 2011 TDSKiller reports no problems. AswMBR comes back with no issues. Dwarden, are you sure the server exe doesn't have some built-in function to advertise itself? Share this post Link to post Share on other sites
gonk 0 Posted July 20, 2011 (edited) Are we the only two with this issue ? Still not sure it if it is Game Spy or a ping bot doing the rounds. Both programs found nothing... example.. this one 124.197.26.174 traces to china somewhere.. stops responding at a gateway... So far it has been from Denmark, America, Africa, China and the UK... Popular game. Edited July 21, 2011 by gonk Share this post Link to post Share on other sites
focher 15 Posted July 21, 2011 You are not the only one experiencing the issue. See the following thread where it's being discussed. http://forums.bistudio.com/showthread.php?t=120552 Share this post Link to post Share on other sites
focher 15 Posted July 21, 2011 I just saw someone create a new thread reporting the issue. I posted for them to come to this thread to keep the discussion in one place. I suspect that most server admins just aren't looking at their network usage as closely. Until you reported seeing the behavior, I never bothered to look either. Share this post Link to post Share on other sites
Rexxenexx 0 Posted July 21, 2011 That would be me thx Focher. My Thread I have the same prob. Both Normal exe and Beta exe after a couple min will get tasked externally. It's going on right now. I can tell because my router is blinking and I'm the only one on the Ded server via LAN. Share this post Link to post Share on other sites
gonk 0 Posted July 21, 2011 I just saw someone create a new thread reporting the issue. I posted for them to come to this thread to keep the discussion in one place. I suspect that most server admins just aren't looking at their network usage as closely. Until you reported seeing the behavior, I never bothered to look either. Might be right... the theives in Australia charge for Data usage... hence the Mr Scrooge attitude. Share this post Link to post Share on other sites
MJK-Ranger 0 Posted July 21, 2011 (edited) Well, you are not alone... I have a test server online with password. But i do see my server send lot of UDP traffic to 72.241.243.204 and some other IP's on Remote port UDP 27005 and UDP 80 I found this info from site: http://pastebin.com/7Y64x0vQ I don't know what kind of list that is, but that IP shows up in that list. Player McLovin'! connected from 72.241.243.204:27005 <---- funny shit.. IP: 72.241.243.204 for 10 min, my server sent 40 500 254 Bytes Out, Protocol UDP and Remote Port UDP 27005 and 36 000 Packets IP: 98.200.194.27 for 10 min, my server sent 18 043 392 Bytes Out, Protocol UDP and Remote Port UDP 80 and 16 584 Packets IP: 24.2.33.74 (NoXiousNet.com) for 10 min, my server sent 38 844 864 Bytes Out, Protocol UDP and Remote Port UDP 27005 and 35 703 Packets IP: 67.8.172.255 for 10 min, my server sent 39 153 360 Bytes Out, Protocol UDP and Remote Port UDP 80 and 37 720 Packets BUT.... i think this is quite normally since the server is public, it's not only GameSpy that are collection info from your server, it's lot of other site out there that are doing the same, GameTracker, etc etc and all the other people that are in multiplayer browser in the game, six updates etc etc :) And this is happen even if i set my server as Private: reportingIP="127.0.0.1" IP: 67.8.172.255 for 10 min, my server sent 41 691 270 Bytes Out, Protocol UDP and Remote Port UDP 80 and 40 720 Packets IP: 24.2.33.74 (NoXiousNet.com) stopped after 4 min, my server sent 14 152 092 Bytes Out, Protocol UDP and Remote Port UDP 27005 and 13 634 Packets And port UDP 27005 are mostly used by master servers. Edited July 21, 2011 by MJK-Ranger Share this post Link to post Share on other sites
focher 15 Posted July 21, 2011 It really does not look like malicious traffic. It just looks very "chatty". The server is constantly sending the Arma server details (hostname, version, map name, player info, mod list, etc). The server then gets back exactly the same details every time. The "client" IP can change at launch of the server (then remains constant). It's UDP with a source port of 27005 (in both directions). 00 11 0a 5b 5e 9f 00 04 ed a2 23 5f 08 00 45 00 00 26 00 01 00 00 77 11 48 99 18 02 21 4a 3b a7 86 3a 69 7d 08 fe 00 12 ee 88 fe fd 00 48 4c 53 57 ff 00 00 00 00 00 00 00 00 00 00 Share this post Link to post Share on other sites
Rexxenexx 0 Posted July 21, 2011 I live in Los Angeles CA USA. 27005 is the port they use here to. You think it's just a website/gamespy like deal poorly programmed to update stats? I disabled my servers port forwards on the router now it's just pinging the hell out of the router but not getting through to the server. My setup is: Verizon Fios Router > Personal Router (used as hardware firewall + DHCP + WiFi) > GB Hub Ded Server > Hub My game computer > Hub Works good beside this. ---------- Post added at 08:34 PM ---------- Previous post was at 07:15 PM ---------- Opened it back up and used the servers software firewall to Block UDP In Source ports 27005, 40000, and 30000. Recording alot of hits on all those ports from the same IP addy 68.68.28.150 ---------- Post added at 08:55 PM ---------- Previous post was at 08:34 PM ---------- Tried the Verizon Fios router to block and its working. I think it is a DoS attack. Not a good one. Share this post Link to post Share on other sites
.kju 3245 Posted July 21, 2011 Did you try to disable reporting to gamespy? http://community.bistudio.com/wiki/server.cfg reportingIP="<>"; Share this post Link to post Share on other sites
focher 15 Posted July 21, 2011 (edited) I disabled the Gamespy reporting and didn't see a change. However, I noticed something new. When using Resource Monitor, those UDP sessions are shown as running under arma2oaserver.exe. However, the sessions are not shown in TCPview or CurrPorts. While running Wireshark, I see the UDP traffic. I shut down arma2oaserver.exe and the traffic continues. So I reboot the machine and, without ever opening arma2oaserver.exe, I run Wireshark. I see all of the suspicious traffic. It appears that what we see in Resource Monitor as sessions under arma2oaserver.exe is inaccurate for whatever reason. Resource Monitor shows the traffic as arma2oaserver.exe related but in fact, the traffic might have nothing to do with arma2oaserver.exe. It's talking on port 2302, though. TDSkill didn't see anything, so I am currently running some other rootkit detection progams to see if they detect anything. According to the traffic, I see a string of "HLSW" in the packet (which is only 10 bytes long, and always the same). A lookup of HLSW is that it's a game server browser and statistics software, which includes support for Arma 2. It could be that HLSW "learns" a server's IP address when arma2oaserver is running, and just keeps "talking" to the IP even when it doesn't get a reply. Edited July 21, 2011 by Focher Share this post Link to post Share on other sites
MJK-Ranger 0 Posted July 21, 2011 (edited) I disabled the Gamespy reporting and didn't see a change. However, I noticed something new. When using Resource Monitor, those UDP sessions are shown as running under arma2oaserver.exe. However, the sessions are not shown in TCPview or CurrPorts.While running Wireshark, I see the UDP traffic. I shut down arma2oaserver.exe and the traffic continues. So I reboot the machine and, without ever opening arma2oaserver.exe, I run Wireshark. I see all of the suspicious traffic. It appears that what we see in Resource Monitor as sessions under arma2oaserver.exe is inaccurate for whatever reason. Resource Monitor shows the traffic as arma2oaserver.exe related but in fact, the traffic might have nothing to do with arma2oaserver.exe. It's talking on port 2302, though. TDSkill didn't see anything, so I am currently running some other rootkit detection progams to see if they detect anything. According to the traffic, I see a string of "HLSW" in the packet (which is only 10 bytes long, and always the same). A lookup of HLSW is that it's a game server browser and statistics software, which includes support for Arma 2. It could be that HLSW "learns" a server's IP address when arma2oaserver is running, and just keeps "talking" to the IP even when it doesn't get a reply. Hi. Yeah, the traffic is still there even if you shutdown your arma 2 server. I tested this. I shutdown my arma 2 test server, my router still indicate traffic to my arma 2 test server. So i turn off my arma 2 server computer, and then the traffic stopped :) Something to try: Remove all your arma 2 server ports from your router/firewall/port forward. Then change your "server.cfg" and remove reportingIP=xxxxxxxxx or just remove the line and add this one reportingIP="<>"; This will run your server Private, it's suppose to mean that your server will not be online/public. No one can see it. Before you start your arma 2 server, change your arma 2 port to something else. Don't use the same port as you have. Now see if you still got traffic out from the arma2oaserver.exe. Theoretical, you should NOT have any traffic out now, since your server are in private and new port. EDIT: I did this test and i can report, there is no more traffic out :) Status say: UDP Listen port 2802, 2804 and 2805. Port 2802 is my arma test server port, and port 2804 and 2805 is default. I didn't open those port in my router/firewall. This mean, there is no buggy buggy exe file :) So all the traffic out is because gamespy and other sites are collection info of your arma 2 server session. Edited July 21, 2011 by MJK-Ranger Share this post Link to post Share on other sites
Dwarden 1125 Posted July 22, 2011 it's most likely some query service or users keeping running some monitoring tools ... if you consider it too disruptive or bandwidth demanding you can always try ban that on firewall Share this post Link to post Share on other sites
Rexxenexx 0 Posted July 22, 2011 It stopped the next morning after I blocked it on the Verizon Fios router. I blocked the IP addys (3) and the incoming ports (3). Just as a test I Disabled the block to see if their computer would slow down the pings, but the router auto-blocked them due to "UDP Flooding." Lol. So I just Enabled the blocks and all is good. Share this post Link to post Share on other sites
Rexxenexx 0 Posted July 25, 2011 (edited) Looks like they're at it again this afternoon. DELETED Thats after blocking IPs and Ports on the FiosRouter. Here is an area in the log that actually blocks. DELETED EDIT: n/m I had "Connection States" ON. Here is a better log: Jul 24 18:15:55 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:55 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:54 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:54 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:53 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:53 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:52 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:52 2011 Firewall Info Rate Limit 138 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:51 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:51 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:50 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:50 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:49 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:49 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:48 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:48 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:47 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:47 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:46 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:46 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:45 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:45 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:44 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:44 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:43 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:43 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:42 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:42 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:41 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:41 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:40 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:40 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:39 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:39 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:38 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:38 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:37 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:37 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:36 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:36 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:35 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:35 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:34 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:34 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:33 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:33 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:32 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:32 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:31 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:31 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:30 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:30 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:29 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:29 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:28 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:28 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:27 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:27 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:26 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:26 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:25 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:25 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:24 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:24 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:23 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:23 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:22 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:22 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:21 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:21 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:20 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:20 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:20 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:20 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:18 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:18 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:17 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:17 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:16 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:16 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:15 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:15 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:14 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:14 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:13 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:13 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:12 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:12 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:11 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:11 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:10 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:10 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:09 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:09 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:09 2011 Outbound Traffic Accepted Traffic - Default policy TCP [Router/DHCP]:53377->74.125.53.188:5228 on eth1 Jul 24 18:15:09 2011 Outbound Traffic Accepted Traffic - Wireless Broadband Router initiated traffic UDP [VerizonFiosRouter]:1024->68.238.64.12:53 on eth1 Jul 24 18:15:08 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:08 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:07 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:07 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:06 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:06 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:05 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:05 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:04 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:04 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:03 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:03 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:02 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:02 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:01 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:01 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:00 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:00 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:59 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:59 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:58 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:58 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:57 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:57 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:56 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:56 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:55 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:55 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:54 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:54 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:53 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:53 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:52 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:52 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:51 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:51 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:50 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:50 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:49 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:49 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:48 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:48 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:47 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:47 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:46 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:46 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:45 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:45 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:44 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:44 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:43 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:43 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:42 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:42 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:41 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:41 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:40 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:40 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:39 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:39 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:39 2011 Outbound Traffic Accepted Traffic - Default policy TCP [Router/DHCP]:50198->81.0.236.117:2323 on eth1 Jul 24 18:14:38 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:38 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:37 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:37 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:36 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:36 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:35 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:35 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:34 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:34 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:33 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:33 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:32 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:32 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:31 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:31 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:30 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:30 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:29 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:29 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:28 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:28 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:27 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:27 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:26 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:26 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:25 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:25 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:24 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:24 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:23 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:23 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:22 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:22 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:22 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:22 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:22 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:22 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Edited July 25, 2011 by Rexxenexx Share this post Link to post Share on other sites
MJK-Ranger 0 Posted July 25, 2011 Looks like they're at it again this afternoon.DELETED Thats after blocking IPs and Ports on the FiosRouter. Here is an area in the log that actually blocks. DELETED EDIT: n/m I had "Connection States" ON. Here is a better log: Jul 24 18:15:55 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:55 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:54 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:54 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:53 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:53 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:52 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:52 2011 Firewall Info Rate Limit 138 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:51 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:51 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:50 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:50 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:49 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:49 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:48 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:48 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:47 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:47 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:46 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:46 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:45 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:45 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:44 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:44 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:43 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:43 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:42 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:42 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:41 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:41 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:40 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:40 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:39 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:39 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:38 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:38 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:37 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:37 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:36 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:36 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:35 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:35 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:34 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:34 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:33 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:33 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:32 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:32 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:31 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:31 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:30 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:30 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:29 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:29 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:28 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:28 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:27 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:27 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:26 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:26 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:25 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:25 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:24 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:24 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:23 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:23 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:22 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:22 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:21 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:21 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:20 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:20 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:20 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:20 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:18 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:18 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:17 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:17 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:16 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:16 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:15 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:15 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:14 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:14 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:13 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:13 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:12 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:12 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:11 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:11 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:10 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:10 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:09 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:09 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:09 2011 Outbound Traffic Accepted Traffic - Default policy TCP [Router/DHCP]:53377->74.125.53.188:5228 on eth1 Jul 24 18:15:09 2011 Outbound Traffic Accepted Traffic - Wireless Broadband Router initiated traffic UDP [VerizonFiosRouter]:1024->68.238.64.12:53 on eth1 Jul 24 18:15:08 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:08 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:07 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:07 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:06 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:06 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:05 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:05 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:04 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:04 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:03 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:03 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:02 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:02 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:01 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:15:01 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:15:00 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:15:00 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:59 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:59 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:58 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:58 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:57 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:57 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:56 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:56 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:55 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:55 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:54 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:54 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:53 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:53 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:52 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:52 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:51 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:51 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:50 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:50 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:49 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:49 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:48 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:48 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:47 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:47 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:46 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:46 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:45 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:45 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:44 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:44 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:43 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:43 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:42 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:42 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:41 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 67.201.15.235:27015->[Router/DHCP]:2302 on eth1 Jul 24 18:14:41 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:40 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:40 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:39 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:39 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:39 2011 Outbound Traffic Accepted Traffic - Default policy TCP [Router/DHCP]:50198->81.0.236.117:2323 on eth1 Jul 24 18:14:38 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:38 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:37 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:37 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:36 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:36 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:35 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:35 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:34 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:34 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:33 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:33 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:32 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:32 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:31 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:31 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:30 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:30 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:29 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:29 2011 Firewall Info Rate Limit 142 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:28 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:28 2011 Firewall Info Rate Limit 139 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:27 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:27 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:26 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:26 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:25 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:25 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:24 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:24 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:23 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:23 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:22 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:22 2011 Firewall Info Rate Limit 141 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:22 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:22 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Jul 24 18:14:22 2011 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/fw_eth1_in/rule/0: UDP 217.23.6.19:111->[Router/DHCP]:2302 on eth1 Jul 24 18:14:22 2011 Firewall Info Rate Limit 140 messages of type [44] Advanced Filter Rule suppressed in 1 second(s) Hi. It' more likely like i told and Dwarden it's most likely some query service or users keeping running some monitoring tools ... After i set my serve to private and removed my open ports. The traffic stopped after couple of days. This is query services or game monitoring from sites that keeps your server info posted somewhere and there is other tools around here that are doing the same. Share this post Link to post Share on other sites
sickboy 13 Posted July 26, 2011 (edited) I've got about 2 Mbit upload going out of my server nearly all times of the day, spread over multiple connections. One of them even downloads with 100 kbyte/sec. This isn't normal monitoring tools traffic - e.g if I monitor from my client, I see like 100 bytes/sec with some peaks, and rather many silence. Why would anyone be downloading 100 kbyte/sec from an empty server?? Must be a software bug or malicious intent. ---------- Post added at 11:49 ---------- Previous post was at 11:42 ---------- Now it's even 6-7 mbit/sec, someone's downloading with ~700 KB/sec from my empty server, some with 70 KB/sec, and some with much lower. Is this for real? :) Mind you, if this continues, it moves 63 GB / day! ---------- Post added at 12:19 ---------- Previous post was at 11:49 ---------- I've done some analysis with WireShark, and it's indeed gamespy network traffic. The issue seems to be that several hosts seem to bombard the server with gamespy info requests, multiple times per second. So instead of checking periodically, every x seconds, some hosts seem to do it 100's of times / second. The packet sent by them contains the string: HLSW, i'll be checking that tool to see whats up. ---------- Post added at 12:30 ---------- Previous post was at 12:19 ---------- I've tried the HLSW tool and when I monitor my server, I fetch about 2 - 4 KB/sec data, and a lot less frequent than what the other hosts are doing. Thinking it might be up to a specific version of the software, or specific settings. Analysis continues.. The hosts generating the high traffic request the gamespy info 100's of times / second; http://i55.tinypic.com/124a26s.png Edited July 26, 2011 by Sickboy Share this post Link to post Share on other sites
Kochleffel 10 Posted July 26, 2011 we got the same on DAO, banned out some ips but there come new ones. Share this post Link to post Share on other sites
alef 0 Posted July 26, 2011 Same for us. I've suspended our "persistent DS" arma2oaserver.exe process now to save bandwidth and cpu. I'll resume it when I know we go there to play. Share this post Link to post Share on other sites
Dwarden 1125 Posted July 26, 2011 i have HLSW myself both public and upcoming build and it's never going over 5kB/s on server (depending of amount info on server) so this is definitely very strange Share this post Link to post Share on other sites
sickboy 13 Posted July 26, 2011 Ticketed @ http://dev-heaven.net/issues/22808 Share this post Link to post Share on other sites
[kh]jman 49 Posted July 26, 2011 Yes the kellys Heroes server is seeing the same incoming traffic from the same ip's (83.222.230.122 for example) on our empty server. It's pulled 8.8GB's in the last 4 hours. Share this post Link to post Share on other sites
