Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I have just started this topic where the firewall on my router detects intrusions

e.g.

Mar 11 14:15:11     kernel  warning     kernel: [fwlog] Intrusion -> SRC=85.102.133.241 DST=109.78.126.234

I'm looking for advice on how I can investigate this further. Firestarter and gufw is installed.

share|improve this question
    
Firestarter is long dead and should not be used any more, try gufw. –  Wild Man Mar 11 at 16:05
    
Just edited to say that it is installed too. –  lunar Mar 11 at 16:09
    
Is there one computer behind the router or many? Do you have any ports forwarded to the (or any of the) computer(s)? –  user68186 Mar 11 at 16:21
    
One computer only. –  lunar Mar 11 at 16:26
1  
It means by default nothing should get past your router unless your computer asks for it. Your internet service provider assigns an IP address to you that points to your router. Your router assign(s) another (set of) IP address(es) to your computer(s). Unless you forward a port or a range of ports to the internal IP address of the computer in your router setting, the router won't send any signal to your computer. Even if your router did this, your computer must have a program running listening to that port for anything to happen. –  user68186 Mar 13 at 14:20

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.