From: Randall Parker
Geo wrote:
> I've never seen anything like that but I would guess that you are blocking
> something in your router or firewall that the system is using as a keepalive
> method. It could be that icmp.
I found an admin page which has Add Service. Then there is a Service Definition:
Name:
Type: (ICMP is a choice here)
Start Port:
Finish Port:
Default QoS Priority:
Should I use this and set something?
>If you are using NAT (which 192.168.x.x IP's
> suggest you are) then you don't need to block icmp at the router so try
> taking that filter out of your router and see if that fixes it.
>
> Geo.
The firewall and the router are both the Netgear FVG318. I use
http://www.routerlogin.net to get into admin forms for it in my browser.
The Netgear box has a category "Domain Name Server (DNS) Address"
for which "Get Automatically From ISP" is checked. I could put a
particular DNS server address there instead. Any suggestions for one to
try?
I found the Security section and Rules page.
It has Outbound Services for which I have Enable "Yes", Service
Name "Any", Action "ALLOW always", Lan Users
"Any", Wan Users "Any", Priority "None", Log
"Always".
In the "Inbound Services" section the action is "BLOCK always".
For Attack Checks I have checked:
Enable VPN Passthrough (IPSec, PPTP, L2TP)
Enable DNS Proxy
Enable Stealth Mode
I do not have turned on:
Drop fragmented IP packets
Block TCP flood
Block UDP flood
Disable SIP ALG
--- BBBS/NT v4.01 Flag-5
* Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)
SEEN-BY: 633/267 270 5030/786
@PATH: 379/45 1 106/2000 633/267
|