[Dshield] just got an SMC Barricade.....

David Vincent david.vincent at mightyoaks.com
Tue Jun 10 17:29:26 GMT 2003


hi folks.

i've just purchased an SMC Barricade firewall/router (the SMC7004VBR for the
record), and i want to start contributing my logs to the DShield Fight-Back
project.

i've checked out the pages and downloaded RouterLog however it doesn't seem
to be able to talk to the SMC.  the routher address is correct, the admin
password is correct, but clicking on the "Show Router Info" button brings up
a screen full of parser errors with a very brief note flashing by which says
"Not Applicable: Static IP".

when clicking the "Get it now" button, the status indicator goes from
"Waiting..." to "getting content from AMIT..." and then back to "Waiting..."
even when there are attacks showing in the logs (viewable from the web
interface).

i've also gone to the SMC site and downloaded the latest firmware for the
firewall and updated it.

anyone have experience with this firewall or can shed some light? 

more useful info:

Runtime Code Version: 
  1.23 (Apr 30 2003 16:12:04)
Boot Code Version:  V1.05
Hardware Version:  01
Serial Num:   S235008240

thanks in advance!

-d



> -----Original Message-----
> From: Graham K. Dodd [mailto:g.dodd at falk-ross.de]
> Sent: June 9, 2003 11:40 PM
> To: General DShield Discussion List
> Subject: AW: [Dshield] Dropoff in TCP:17300?
> 
> 
> John,
> 	over here (Germany) they are still coming in, but if it 
> follows the normal
> trend then I can expect them to start dropping off here in 
> the next two
> weeks.
> We are usually a week behind you guys then drag it on for a 
> while, but you
> do provide a great early warning system for us :-)
> 
> Graham
> 
> > -----Ursprungliche Nachricht-----
> > Von: list-bounces at dshield.org [mailto:list-bounces at dshield.org]Im
> > Auftrag von John Sage
> > Gesendet: Samstag, 7. Juni 2003 21:45
> > An: list at dshield.org
> > Betreff: [Dshield] Dropoff in TCP:17300?
> >
> >
> > Is it just me, or has TCP:17300 gone quiet:
> >
> > Total packets to port 17300 in alert.full-Jun.01.06:00: 662
> > Total packets to port 27374 in alert.full-Jun.01.06:00: 7
> >
> >
> > Total packets to port 17300 in alert.full-Jun.02.05:29: 334
> > Total packets to port 27374 in alert.full-Jun.02.05:29: 51
> >
> > Total packets to port 17300 in alert.full-Jun.03.05:01: 249
> > Total packets to port 27374 in alert.full-Jun.03.05:01: 5
> >
> > Total packets to port 17300 in alert.full-Jun.04.05:18: 37
> > Total packets to port 27374 in alert.full-Jun.04.05:18: 0
> >
> > Total packets to port 17300 in alert.full-Jun.05.06:15: 5
> > Total packets to port 27374 in alert.full-Jun.05.06:15: 0
> >
> > Total packets to port 17300 in alert.full-Jun.06.05:34: 31
> > Total packets to port 27374 in alert.full-Jun.06.05:34: 0
> >
> > today:
> > Ports report for /var/log/snort/alert.full
> > Generated 12:30:01 (TZ -07:00) 06/07/2003
> > Total packets to port 17300 in /var/log/snort/alert.full: 0
> > Total packets to port 27374 in /var/log/snort/alert.full: 0
> >
> >
> >
> > - John
> > --
> > "You are in a twisty maze of weblogs, all alike."
> >
> > _______________________________________________
> > list mailing list
> > list at dshield.org
> > To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> 
> 
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
> 




More information about the list mailing list