IDNetters Forums

Technical News & Discussion => IDNet Help => Topic started by: smeghead on Jan 05, 2008, 14:59:53

Title: DoS unknown_protocol Block
Post by: smeghead on Jan 05, 2008, 14:59:53
I am using a Draytek Vigor 2600 router and in my syslogs I keep getting entries along the lines of:-
"DoS unknown_protocol Block 212.69.63.51 -> 224.0.0.13 PR 103 len 20 54"
and am curious what is DoS unknown_protocol Block 212.69.63.51 ?

I know what a DOS attack is, but I've never seen the "unknown_protocol Block" entry before.
Can somebody please explain?
Thanks
Title: Re: DoS unknown_protocol Block
Post by: Inactive on Jan 05, 2008, 15:01:55
I can't, but I can offer you a warm welcome to the forum, along with a welcome Karma.. :welc: :karmic:

Someone will give some advice very soon
Title: Re: DoS unknown_protocol Block
Post by: Rik on Jan 05, 2008, 15:06:12
Like In, I can't explain, but welcome to the forum. :)

Does this (http://homepage.ntlworld.com/herring1/outpostconf.html) help at all?
Title: Re: DoS unknown_protocol Block
Post by: Simon on Jan 05, 2008, 15:10:21
:welc:

There's little I can find on Google about this, but I would guess it could be a port scan block, i.e. your router firewall doing it's job.

As Inactive said, I expect someone will be along soon with more advice.  :)
Title: Re: DoS unknown_protocol Block
Post by: Rik on Jan 05, 2008, 15:11:12
Google was a tad obfuscating I found. ;)
Title: Re: DoS unknown_protocol Block
Post by: MoHux on Jan 05, 2008, 15:58:45
Quote from: Rik on Jan 05, 2008, 15:11:12
Google was a tad obfuscating I found. ;)

Some people obfuscate things deliberately .......... (in fact me an In' are always obfuscated!!)  :sigh:

:whistle:
Title: Re: DoS unknown_protocol Block
Post by: Rik on Jan 05, 2008, 16:01:22
I've never heard it called that before, Mo. :)
Title: Re: DoS unknown_protocol Block
Post by: Inactive on Jan 05, 2008, 16:03:44
Quote from: MoHux on Jan 05, 2008, 15:58:45
.......... (in fact me an In' are always obfuscated!!)  :sigh:



You ain't wrong Mo..  ;D


(PS. How is the eye ? ).
Title: Re: DoS unknown_protocol Block
Post by: MoHux on Jan 05, 2008, 16:29:18
Quote from: Rik on Jan 05, 2008, 16:01:22
I've never heard it called that before, Mo. :)

Now who's obfuscated?  ;D

Fine thanks In', due back for the final post-op check next Weds.  May have to put it off tho', I have a stinking cold at the moment.
I have asked for 'hoods' over my eyes to be removed, they are spoiling things a bit.  I think my forehead wants to move to my navel!  ::)  So hopefully that's next.  ;D
Title: Re: DoS unknown_protocol Block
Post by: Rik on Jan 05, 2008, 16:31:27
Good to hear that things are going well, Mo. In and I could do the job on the hoods for you with a length or two of Duck tape.  >:D
Title: Re: DoS unknown_protocol Block
Post by: MoHux on Jan 05, 2008, 16:34:30
Quote from: Rik on Jan 05, 2008, 16:31:27
Good to hear that things are going well, Mo. In and I could do the job on the hoods for you with a length or two of Duck tape.  >:D

Oh! Gawd! ........... I forgot to switch off the web-cam again!!  :laugh: