Sonicwall Log File Filling up with UPD Drops and ICMP Drops

am 05.01.2007 01:01:26 von petersen.jr

Hello:

My log file is filling up with these all of a sudden. The
destination
is my public IP. Anay ideas? I have a Netgear Wireless Router behind
it NOT passing out IPS... Just being a Router. Should i get a wireless
Switch? I just need the wireless portion of this router.

08/24/2002 17:30:34.512 ICMP packet dropped 144.223.44.9, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:28:58.576 ICMP packet dropped 140.119.243.2, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:28:29.000 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 9126, LAN
08/24/2002 17:27:45.832 ICMP packet dropped 210.68.3.30, 4, WAN
68.81.122.142, 4, LAN 'Source Quench' 0
08/24/2002 17:26:56.032 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 7450, LAN
08/24/2002 17:26:35.704 ICMP packet dropped 4.1.0.7, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:25:38.048 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 5450, LAN
08/24/2002 17:25:03.144 ICMP packet dropped 12.122.255.194, 3,
WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:24:32.064 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 8044, LAN
08/24/2002 17:23:05.080 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 9626, LAN
08/24/2002 17:22:18.160 ICMP packet dropped 144.232.186.46, 3,
WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:21:59.096 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 5160, LAN
08/24/2002 17:21:29.304 TCP connection dropped 209.208.25.5,
4381, WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 17:20:50.128 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 6478, LAN
08/24/2002 17:19:48.240 ICMP packet dropped 208.172.138.50, 3,
WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:17:47.240 ICMP packet dropped 141.151.4.70, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:12:40.608 ICMP packet dropped 141.151.4.70, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:10:17.512 ICMP packet dropped 141.151.4.70, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:08:57.016 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 9424, LAN
08/24/2002 17:08:52.336 ICMP packet dropped 144.228.127.10, 3,
WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:07:42.352 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 6150, LAN
08/24/2002 17:07:15.144 ICMP packet dropped 137.192.210.106, 3,
WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:05:59.832 ICMP packet dropped 211.78.32.133, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:04:54.496 ICMP packet dropped 144.223.44.5, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:04:48.384 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 5344, LAN
08/24/2002 17:03:31.416 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 8456, LAN
08/24/2002 17:03:16.016 ICMP packet dropped 66.38.155.178, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:01:45.432 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 5488, LAN
08/24/2002 17:01:30.832 ICMP packet dropped 163.25.91.32, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 17:00:33.448 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 5232, LAN
08/24/2002 16:59:38.208 TCP connection dropped 209.208.25.5,
2060, WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:59:24.480 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 4622, LAN
08/24/2002 16:57:42.496 UDP packet dropped 151.197.0.39, 53, WAN
68.81.122.142, 4628, LAN
08/24/2002 16:57:32.560 ICMP packet dropped 208.172.138.50, 3,
WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 16:55:22.528 ICMP packet dropped 141.151.4.70, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 16:52:41.432 ICMP packet dropped 141.151.4.70, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 16:51:46.944 TCP connection dropped 168.95.5.10,
54054, WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:50:43.272 TCP connection dropped 168.95.5.3, 37604,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:49:35.736 TCP connection dropped 168.95.5.10,
53552, WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:48:29.608 TCP connection dropped 168.95.5.1, 39501,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:48:25.736 ICMP packet dropped 144.223.44.9, 3, WAN
68.81.122.142, 3, LAN 'Dest Unreachable' 0
08/24/2002 16:47:23.112 TCP connection dropped 168.95.5.1, 38899,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:46:16.864 TCP connection dropped 168.95.5.4, 63641,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:45:12.016 TCP connection dropped 168.95.5.1, 37745,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:44:08.720 TCP connection dropped 168.95.5.1, 37171,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:42:57.080 TCP connection dropped 168.95.5.3, 64546,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:41:50.816 TCP connection dropped 192.72.81.232,
65296,
WAN 68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:40:45.128 TCP connection dropped 139.175.55.242,
44418,
WAN 68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:39:38.288 TCP connection dropped 168.95.5.3, 62262,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:38:34.512 TCP connection dropped 139.175.55.237,
54943,
WAN 68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:37:27.752 TCP connection dropped 168.95.5.1, 33860,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:36:18.256 TCP connection dropped 168.95.5.2, 64947,
WAN
68.81.122.142, 113, LAN 'Authentication' 0
08/24/2002 16:35:12.464 TCP connection dropped 168.95.5.2, 64296,
WAN
68.81.122.142, 113, LAN 'Authentication' 0

Re: Sonicwall Log File Filling up with UPD Drops and ICMP Drops

am 05.01.2007 02:23:17 von "Mr. Arnold"

petersen.jr@gmail.com wrote:
> Hello:
>
> My log file is filling up with these all of a sudden. The
> destination
> is my public IP. Anay ideas?

So, you got WAN/Internet traffic coming from remote IP(s) with
unsolicited inbound traffic coming to the FW and it's being dropped by
the FW. That's everyday life out there on the Internet.

> I have a Netgear Wireless Router behind
> it NOT passing out IPS... Just being a Router. Should i get a wireless
> Switch? I just need the wireless portion of this router.
>

What's your conclusion here that somehow you're being attacked on the
wireless over the Internet, which is not happening?

The wire/wireless AP router is a *switch*. It will become a wire/WAP
switch when you disable the DHCP server on the router and connect it to
the SonicWall.

http://www.homenethelp.com/web/explain/about-hubs-and-switch es.asp

If you want to covert the router into a switch and plug into the gateway
router, then follow the instructions in the link substituting your FW
appliance and router in the various roles of the Linksys routers, as the
principles of connecting them are the same no matter if it's wire to
wire, wireless to wire, wire to wireless or wireless to wireless, no
matter the make brand or model.

http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/ std_adp.php?p_faqid=358