Security Alert Received

[john]

I've just received an e-mail apparently from myself (i.e. my own e-mail address) with the subject :

'NETGEAR *Security Alert* [3d:28:9d]'

and the contents :

TCP Packet - Source:**.***.***.**,**** Destination:**.***.*.***,**** - [DOS]


(I've replaced the IP Adddress's numbers with '*'s as this is a public forum)

As I've not posted this how has it occurred and does anyone know if this is anything I should be concerned about ?

[Rik]

It suggests that you have the Netgear set up to email you security log entries, John. It's perfectly normal, and is just telling you that a port has been scanned and the firewall has done its job.

[john]

Thanks Rik for your very prompt post, I can sleep easy tonight then.

[Rik]

Yes, the Netgear is watching over you.

[Sebby]

You might find that you get a lot of emails from the router, although it depends what kind of "attacks" you have set to receive alerts about. Most of them, I would say, are completely normal, and it's just the firewall doing it's job, so you might even want to switch off email alters altogether.

[john]

Thanks Sebby, I've had the router nearly 12 months now though and this is the first e-mail from it that I've received.

[Sebby]

DOS attacks are rare (hopefully) so that's probably why. If you have a look in the router settings, you'll probably find you've only got it set to warn you about these. The firewall will certainly be stopping a lot of other things.

[Baz]

I have mine set up to send logs to my email...........but it sends 2 copies each time

stupid thing 

[Sebby]

Which email client do you use? Could it be a dodgy rule you've created?