1. Home
  2. Networking Firewalls
  3. Sonicwall Log File Filling up with UPD Drops and ICMP Drops

Sonicwall Log File Filling up with UPD Drops and ICMP Drops

Hello:

My log file is filling up with these all of a sudden. The destination is my public IP. Anay ideas? I have a Netgear Wireless Router behind it NOT passing out IPS... Just being a Router. Should i get a wireless Switch? I just need the wireless portion of this router.

08/24/2002 17:30:34.512 ICMP packet dropped 144.223.44.9, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:28:58.576 ICMP packet dropped 140.119.243.2, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:28:29.000 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 9126, LAN 08/24/2002 17:27:45.832 ICMP packet dropped 210.68.3.30, 4, WAN 68.81.122.142, 4, LAN 'Source Quench' 0 08/24/2002 17:26:56.032 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 7450, LAN 08/24/2002 17:26:35.704 ICMP packet dropped 4.1.0.7, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:25:38.048 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 5450, LAN 08/24/2002 17:25:03.144 ICMP packet dropped 12.122.255.194, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:24:32.064 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 8044, LAN 08/24/2002 17:23:05.080 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 9626, LAN 08/24/2002 17:22:18.160 ICMP packet dropped 144.232.186.46, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:21:59.096 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 5160, LAN 08/24/2002 17:21:29.304 TCP connection dropped 209.208.25.5, 4381, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 17:20:50.128 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 6478, LAN 08/24/2002 17:19:48.240 ICMP packet dropped 208.172.138.50, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:17:47.240 ICMP packet dropped 141.151.4.70, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:12:40.608 ICMP packet dropped 141.151.4.70, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:10:17.512 ICMP packet dropped 141.151.4.70, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:08:57.016 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 9424, LAN 08/24/2002 17:08:52.336 ICMP packet dropped 144.228.127.10, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:07:42.352 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 6150, LAN 08/24/2002 17:07:15.144 ICMP packet dropped 137.192.210.106, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:05:59.832 ICMP packet dropped 211.78.32.133, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:04:54.496 ICMP packet dropped 144.223.44.5, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:04:48.384 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 5344, LAN 08/24/2002 17:03:31.416 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 8456, LAN 08/24/2002 17:03:16.016 ICMP packet dropped 66.38.155.178, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:01:45.432 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 5488, LAN 08/24/2002 17:01:30.832 ICMP packet dropped 163.25.91.32, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 17:00:33.448 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 5232, LAN 08/24/2002 16:59:38.208 TCP connection dropped 209.208.25.5, 2060, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:59:24.480 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 4622, LAN 08/24/2002 16:57:42.496 UDP packet dropped 151.197.0.39, 53, WAN 68.81.122.142, 4628, LAN 08/24/2002 16:57:32.560 ICMP packet dropped 208.172.138.50, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 16:55:22.528 ICMP packet dropped 141.151.4.70, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 16:52:41.432 ICMP packet dropped 141.151.4.70, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 16:51:46.944 TCP connection dropped 168.95.5.10, 54054, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:50:43.272 TCP connection dropped 168.95.5.3, 37604, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:49:35.736 TCP connection dropped 168.95.5.10, 53552, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:48:29.608 TCP connection dropped 168.95.5.1, 39501, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:48:25.736 ICMP packet dropped 144.223.44.9, 3, WAN 68.81.122.142, 3, LAN 'Dest Unreachable' 0 08/24/2002 16:47:23.112 TCP connection dropped 168.95.5.1, 38899, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:46:16.864 TCP connection dropped 168.95.5.4, 63641, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:45:12.016 TCP connection dropped 168.95.5.1, 37745, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:44:08.720 TCP connection dropped 168.95.5.1, 37171, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:42:57.080 TCP connection dropped 168.95.5.3, 64546, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:41:50.816 TCP connection dropped 192.72.81.232, 65296, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:40:45.128 TCP connection dropped 139.175.55.242, 44418, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:39:38.288 TCP connection dropped 168.95.5.3, 62262, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:38:34.512 TCP connection dropped 139.175.55.237, 54943, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:37:27.752 TCP connection dropped 168.95.5.1, 33860, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:36:18.256 TCP connection dropped 168.95.5.2, 64947, WAN 68.81.122.142, 113, LAN 'Authentication' 0 08/24/2002 16:35:12.464 TCP connection dropped 168.95.5.2, 64296, WAN 68.81.122.142, 113, LAN 'Authentication' 0
Reply to
petersen.jr
Loading thread data ...

So, you got WAN/Internet traffic coming from remote IP(s) with unsolicited inbound traffic coming to the FW and it's being dropped by the FW. That's everyday life out there on the Internet.

What's your conclusion here that somehow you're being attacked on the wireless over the Internet, which is not happening?

The wire/wireless AP router is a *switch*. It will become a wire/WAP switch when you disable the DHCP server on the router and connect it to the SonicWall.

formatting link
If you want to covert the router into a switch and plug into the gateway router, then follow the instructions in the link substituting your FW appliance and router in the various roles of the Linksys routers, as the principles of connecting them are the same no matter if it's wire to wire, wireless to wire, wire to wireless or wireless to wireless, no matter the make brand or model.

formatting link

Reply to
Mr. Arnold

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.