PocketGPS.co.uk

Anyone have any ideas why my firewall al of a sudden has started
blocking my browsing this site:

http://www.pocketgps.co.uk/

Getting this report in the firewall security log.

"2005.04.02 22:52:22 *SYN Flood to Host* x.x.x.x, 1617->>
62.73.187.141, 80 (from ATM Outbound)"

The firewall is a 3Com ADSL 11g wifi router.

Just wondered why a legit site should be causing this?

I've tried ...

.... rebooting the router, no change.
....temporarily disabling the firewall function ... instant fix ... but
not a good plan!

--
Steve Parry
K100RS SE & F650
and a 520i SE Touring for comfort

(not forgetting the SK90PY)

http://www.gwynfryn.co.uk

"Steve Parry" <(E-Mail Removed)> wrote in
news:(E-Mail Removed):

> "2005.04.02 22:52:22 *SYN Flood to Host* x.x.x.x, 1617->>
> 62.73.187.141, 80 (from ATM Outbound)"

Is this the only website affected? The log indicates that the router
thinks your computer is attempting to do a syn flood outbound if I read
it correctly.
Does it happen from all computers and does it happen with different web
browsers?

--
Colin
*Drop DEAD from the email address to reply*

Steve Parry wrote:
> Anyone have any ideas why my firewall al of a sudden has started
> blocking my browsing this site:
>
> http://www.pocketgps.co.uk/
>
> Getting this report in the firewall security log.
>
> "2005.04.02 22:52:22 *SYN Flood to Host* x.x.x.x, 1617->>
> 62.73.187.141, 80 (from ATM Outbound)"
>
> The firewall is a 3Com ADSL 11g wifi router.
>
> Just wondered why a legit site should be causing this?
>
> I've tried ...
>
> .... rebooting the router, no change.
> ....temporarily disabling the firewall function ... instant fix ... but
> not a good plan!
>
The site could be sending you a lot of fragmented packets which your
firewall thinks is an attack and blocks access.
Try logging on to your router 192.168.xx.xxx/firewall_spi_h.stm and
try increasing the no. of Max incomplete TCP/UDP sessions(works with
some 3com routers)

NBT

NBT fumbled, fiddled and fingered:

> Steve Parry wrote:
>> Anyone have any ideas why my firewall al of a sudden has started
>> blocking my browsing this site:
>>
>> http://www.pocketgps.co.uk/
>>
>> Getting this report in the firewall security log.
>>
>> "2005.04.02 22:52:22 *SYN Flood to Host* x.x.x.x, 1617->>
>> 62.73.187.141, 80 (from ATM Outbound)"
>>
>> The firewall is a 3Com ADSL 11g wifi router.
>>
>> Just wondered why a legit site should be causing this?
>>
>> I've tried ...
>>
>> .... rebooting the router, no change.
>> ....temporarily disabling the firewall function ... instant fix ...
>> but not a good plan!
>>
> The site could be sending you a lot of fragmented packets which your
> firewall thinks is an attack and blocks access.
> Try logging on to your router 192.168.xx.xxx/firewall_spi_h.stm and
> try increasing the no. of Max incomplete TCP/UDP sessions(works with
> some 3com routers)
>

Thanks for that, that appears to have worked !!

Any other "hidden" pages on the router ? )

--
Steve Parry
K100RS SE & F650
and a 520i SE Touring for comfort

(not forgetting the SK90PY)

http://www.gwynfryn.co.uk

"Steve Parry" (E-Mail Removed) wrote in message
news:(E-Mail Removed)
>
> Any other "hidden" pages on the router ? )

Quite a few:

http://www.dslreports.com/forum/rema...7947~mode=flat

Grant fumbled, fiddled and fingered:

> "Steve Parry" (E-Mail Removed) wrote in message
> news:(E-Mail Removed)
>>
>> Any other "hidden" pages on the router ? )
>
> Quite a few:
>
> http://www.dslreports.com/forum/rema...7947~mode=flat

Ta


--
Steve Parry
K100RS SE & F650
and a 520i SE Touring for comfort

(not forgetting the SK90PY)

http://www.gwynfryn.co.uk