Netgear FVX538 FVX538 Reference Manual - Page 216
FTP Logging, Invalid Packet Logging, Table C-17. System Logs: FTP
UPC - 606449037234
View all Netgear FVX538 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 216 highlights
ProSafe VPN Firewall 200 FVX538 Reference Manual Table C-16. System Logs: Multicast/Broadcast (continued) Explanation Recommended Action • This packet (Broadcast) is destined to the device from the WAN network. • For other parameters, refer to Table C-1. None FTP Logging Table C-17. System Logs: FTP Message Explanation Recommended Action Feb 2007 22 14:46:56 [FVX538] [kernel] [FTP-ACTIVE] SRC=192.168.10.211 DST=192.168.1.97 PROTO=TCP SPT=1983 DPT=21 Feb 2007 22 14:46:56 [FVX538] [kernel] [FTP-PASSIVE] SRC=192.168.10.211 DST=192.168.1.97 PROTO=TCP SPT=1984 DPT=21 Feb 2007 22 19:48:17 [FVX538] [kernel] [FTP-DATA][ACCEPT] SRC=192.168.10.10 DST=192.168.20.10 PROTO=TCP SPT=54879 DPT=6459 • These packets are active and passive FTP session data transfers respectively. • For other parameters, refer to Table C-1. To enable these logs, from CLI command prompt of the router, enter this command: monitor/firewallLogs/logger/loggerConfig logFtp 1 And to disable it, monitor/firewallLogs/logger/loggerConfig logFtp 0 Invalid Packet Logging Table C-18. System Logs: Invalid Packets Message Explanation Recommended Action Message 2007 Oct 1 00:44:17 [FVX538] [kernel] [INVALID] [NO_CONNTRACK_ENTRY] [DROP] SRC=192.168.20.10 DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899 No Connecrtion Tracking entry exists 1. Invalid packets are dropped. 2. Use this command to enable dropping and logging of the invalid packets: fw/rules/attackChecks/configure dropInvalid 1 To allow invalid packet and disable logging: fw/rules/attackChecks/configure dropInvalid 0 2007 Oct 1 00:44:17 [FVX538] [kernel] [INVALID][RST_PACKET][DROP] SRC=192.168.20.10 DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899 C-10 v1.0, March 2009 System Logs and Error Messages