o constatare

[buge1880]

In ultima vr3me, probabil din cauza ca s-au facut o multime de cazari "aiurea", au aparut si tentative de a avea net pe gratis din partea unor colegi cazati in caminul U5.Astfel ca unii dintre ei incearca sa foloseasca MAC-uri valide pt a avea net si acest lucru mi l-a raportat firewallul Sygate ca "Mac Spoofing".
Am postat ca ex si un log?
Daca n-am dreptate si am interpretat gresit va rog sa ma contraziceti:
07/23/2004 14:48:16 Mac Spoofing Minor Incoming Unknown 10.20.2.128 10.5.6.90 1 07/23/2004 14:48:15 07/23/2004 14:48:15
3 07/23/2004 14:50:46 Mac Spoofing Minor Incoming Unknown 10.12.6.130 10.5.6.90 1 07/23/2004 14:50:31 07/23/2004 14:50:31
4 07/23/2004 15:00:46 Mac Spoofing Minor Incoming Unknown 10.5.0.70 10.5.6.90 1 07/23/2004 15:00:42 07/23/2004 15:00:42
5 07/23/2004 15:25:46 Mac Spoofing Minor Incoming Unknown 10.128.0.4 10.5.6.90 1 07/23/2004 15:25:31 07/23/2004 15:25:31

[buge1880]

Am gresit cand m-am referit numai la cei cazati in U5.Ma refer la cei care au intrat oarecum abuziv in reteaua RSM.Pb mea e ca firewallul e bombardat de cateva ori pe minut si acest lucru imi ingreuneaza calculatoru iar procesoru-mi sta in 40% chiar mai mult.Nu am virusi ca am scanat, iar cand opresc reteaua procesoru ajunge la 1%.
27 07/23/2004 21:43:41 Mac Spoofing Minor Incoming Unknown 10.7.0.127 10.5.6.90 1 07/23/2004 21:43:34 07/23/2004 21:43:34

28 07/23/2004 21:43:41 Mac Spoofing Minor Incoming Unknown 10.7.2.126 10.5.6.90 1 07/23/2004 21:43:37 07/23/2004 21:43:37

29 07/23/2004 21:43:41 Mac Spoofing Minor Incoming Unknown 10.7.0.108 10.5.6.90 1 07/23/2004 21:43:37 07/23/2004 21:43:37

30 07/23/2004 21:43:41 Mac Spoofing Minor Incoming Unknown 10.6.1.120 10.5.6.90 1 07/23/2004 21:43:38 07/23/2004 21:43:38

31 07/23/2004 21:43:51 Mac Spoofing Minor Incoming Unknown 10.7.0.127 10.5.6.90 1 07/23/2004 21:43:49 07/23/2004 21:43:49

32 07/23/2004 21:43:58 Mac Spoofing Minor Incoming Unknown 10.7.2.126 10.5.6.90 1 07/23/2004 21:43:51 07/23/2004 21:43:51

33 07/23/2004 21:43:58 Mac Spoofing Minor Incoming Unknown 10.7.0.108 10.5.6.90 1 07/23/2004 21:43:52 07/23/2004 21:43:52

34 07/23/2004 21:43:58 Mac Spoofing Minor Incoming Unknown 10.6.1.120 10.5.6.90 1 07/23/2004 21:43:53 07/23/2004 21:43:53

[buge1880]

Pachetele(atacurile) cred ca vin de la server(gateway) sau de la un blaster worm care incearca sa intre.Astfel ca firewallul e bombardat permanet iar procesul smc.exe al firewalului imi tine procesoru in 40-50%.Sincer am schimbat Norton(antivirus si firewall) cu Sygate si McAfee dar sunt cam dezamagit de ultimele doua.)

[elfstone]

N-as da Sygate-ul pe NPF in nici o situatie. Mi se pare mult mai "serios", e mai flexibil si permite control mai "fin"... totdeauna mi s-a parut foarte robust : sincer sa fiu si nu mi-a facut probleme nici cand primea cate 15-20 de atacuri pe minut. Singurul moment in care "manca" multe resurse a fost cand i-am activat optiunea "capture full packet". Cu aia activata, face urat la mine (firesc, cred).

[Dan]

Kestia asta cu sygate o stiu de mult timp..intr-adevar pe vara se intampla mai des...N-am inteles insa din fragmentele care le-ai pus din log ce legatura are serverul cu asta?