Hot Downloads

×

Notice

The forum is in read only mode.
Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1
  • 2

TOPIC: DNS problem

DNS problem 13 years 4 months ago #7686

Hello,

I receive more packet for my computer (my firewall has a bad configuration) but the packets was ignored.

but a mechanism running (perhaps a malware) and when i receive a packet : my computer contact the server DNS and resolve name of the computer and a final packet of the computer send to me.

I have constated that's reccurent web site who contact me but he have a many web site. (one site all five second)

And when i launch my connexion, no web site is contacted.

an idea ?

Re: DNS problem 13 years 4 months ago #7691

Only if I could have understood your problem.

Re: DNS problem 13 years 4 months ago #7695

Can you try and make that a bit clearer...?

It sounds like you've got some malware installed.. perhaps Ad-aware or a virus scan is what you need.


Cheers,

Re: DNS problem 13 years 4 months ago #7701

No virus, no malware found.

In normal state, i receive an packet by an another computer, this packet is ignored.

In ambigous state, i receive a packet, it's not ignored because server dns is contacted to resolve the IP. And after, i receive a final packet who is ignored.

Normal state : blabla.com:5430 ----> Mycomputer:4445 it'terminated

Ambigous mode : blalbla.com:54300
> Mycomputer:2115
Mycomputer:dns ----> ServerDNS:dns query for bla...
ServerDNS:dns ----> MyComputer:dns resp IP to bla.


And it resolve name of all packet that i receive

Re: DNS problem 13 years 4 months ago #7703

:shock: Is that clear? :shock:

Got any original error messages/screenshots?

Re: DNS problem 13 years 4 months ago #7727

If you know ethereal that's clear !

I have change my firewall Norton antivirus for outpost.

I have block this external traffic

But i have a task system in my computer who make that.

I have a process system and a traffic netbios blocked in local by outpost.

Computer try to scan other computer.

If my IP is 83.155.170.81 computer who an IP in 83.155.*.* are scanned (port 3191, 4528, 3764....)

I suppose that a bot server is contacted and send more results.

Best attack or best scan ?!?!?

No virus found with Norton, No-adware found with spybot and Ad-aware
  • Page:
  • 1
  • 2
Time to create page: 0.157 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup