Ftp Logging; Invalid Packet Logging - NETGEAR FVX538 - ProSafe VPN Firewall 200 Router Reference Manual

ProSafe VPN Firewall 200 FVX538 Reference Manual
Table C-16. System Logs: Multicast/Broadcast (continued)
Explanation
Recommended Action

FTP Logging

Table C-17. System Logs: FTP
Message
Explanation
Recommended Action

Invalid Packet Logging

Table C-18. System Logs: Invalid Packets
Message
Explanation
Recommended Action
Message
C-10
• This packet (Broadcast) is destined to the device from the WAN network.
• For other parameters, refer to
None
Feb 2007 22 14:46:56 [FVX538] [kernel] [FTP-ACTIVE] SRC=192.168.10.211
DST=192.168.1.97 PROTO=TCP SPT=1983 DPT=21
Feb 2007 22 14:46:56 [FVX538] [kernel] [FTP-PASSIVE] SRC=192.168.10.211
DST=192.168.1.97 PROTO=TCP SPT=1984 DPT=21
Feb 2007 22 19:48:17 [FVX538] [kernel] [FTP-DATA][ACCEPT]
SRC=192.168.10.10 DST=192.168.20.10 PROTO=TCP SPT=54879
DPT=6459
• These packets are active and passive FTP session data transfers
respectively.
• For other parameters, refer to
To enable these logs, from CLI command prompt of the router, enter this
command:
monitor/firewallLogs/logger/loggerConfig logFtp 1
And to disable it,
monitor/firewallLogs/logger/loggerConfig logFtp 0
2007 Oct 1 00:44:17 [FVX538] [kernel] [INVALID]
[NO_CONNTRACK_ENTRY] [DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
No Connecrtion Tracking entry exists
1. Invalid packets are dropped.
2. Use this command to enable dropping and logging of the invalid packets:
fw/rules/attackChecks/configure dropInvalid 1
To allow invalid packet and disable logging:
fw/rules/attackChecks/configure dropInvalid 0
2007 Oct 1 00:44:17 [FVX538] [kernel]
[INVALID][RST_PACKET][DROP] SRC=192.168.20.10
DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899
v1.0, March 2009
Table C-1.
Table C-1.
System Logs and Error Messages