D-Link DIR-655 :: Blocked Incoming GRE Packet Preventing VPN Connections
Feb 1, 2011
I've been fighting with getting VPN connections working properly with my Dlink router. I set up virtual servers for PPTP and L2TP and could usually get the first attempt to work. Subsequent client connections would always fail.The logs display the following-Dropped GRE packet from 192.168.0.10 to 64.232.xxx.xxx as unable handle packet header. Blocked incoming GRE packet from 64.232.xxx.xxx to 76.105.xxx.xxx.What seemed to fix it was going to Firewall Settings and setting UDP Endpoint Filtering to Endpoint Independent and TCP Endpoint Filtering to Address Restricted.
Using a Samsung Galaxy S2, iPod Touch 3rd Gen, and Nook Color, they are all experiencing retry problems, even when 3 feet from the DIR-601. When I use them my log gets filled with messages like:Blocked incoming TCP Ack packet from 192.168.100.201:2926 to 209.85.145.113:80 with unexpected sequence On the devices I see the downloads/content taking a long time to appear and often I get a blank page or "Retry" messages. I purchased two DIR-601s and get the same problem with both. They are both running 1.02NA firmware. The WLAN is Time Warner cable modem. Prior to this I had a Linksys WRT-54 that gave great performance, though just at B/G speeds. I was hoping for a performance boost but right now the N speeds are slower than B with the retries.
I've been fighting with my E2500 since I got it back in June with lag, dropped connections, etc. It's a bit intermittent but can hang around for hours at a time when it kicks in. Restarts but the issue always comes back. Most noticeable while gaming online or on a VOIP program such as Team Speak. Generally when it happens If I'm monitoring my Team Speak connection the incoming packet loss shoots up between 20-30%, starting to drop out every other word or so. No out going packet loss. The connection drops are random between computers (I have one mac and one pc in the house) where one will be fine and the other wont, or when the whole system will stay connected and drop all transfer. In the case of this last one it's not my ISP's connection as any streaming happening between one computer and an Apple TV device will also cease. I've also swapped back to my old router (an older model linksys) and all problems have stopped. Fully rebooted and reconfigured the router about 3 or 4 times and am on the latest version of firmware (1.0.003). It was much worse on 1.0.002 but still very noticeable on 003. Also no difference with a different wireless adapter. I've tried the chat technical support but all they did was take 45 minutes to tell me how to reboot my router after telling them I already had.
On my network I have a Netgear ReadNAS connected and I'm using an add-in (ReadyNAS Remote) that simplifies the log in to for both internet and LAN-users. However, I get a lot of the following entries in the log when that add-in is being used.
When an internet user log in via ReadyNAS Remote: "Blocked outgoing TCP packet from 192.168.0.xxx:3649 to xx.xxx.xxx.xxx:50125 with unexpected acknowledgement 3320366884 (expected 754541166 to 755655246)"
When a LAN-user log in via ReadyNAS Remote: "Blocked incoming TCP packet from 69.xxx.xxx.xx:80 to xx.xx.xx.xxx:50329 with unexpected sequence 3004123085 (expected 3004136875 to 3004393915)"
How to configure my DIR-615 (Hardware Version E1 - Firmware Version 5.00NA) to:
1. Assign/Reserve IP address for 2 machines.
2. Route a web browser to a server on the first machine (port 80) as a default when another computer or smart-phone or device joins my open wireless network.
I am hoping to eliminate any changes to the IP address of the first two computers so that the server's IP address and port are static. I would also like anyone who joins the network to merely open their browser and be presented with the http interface from my server.
I am trying to make my computer support incoming VPN connections. I am using Windows 7 Home Premium on the computer I want to make the connection on.I am also using Verizon FioS internet (comes with default router/modem combo) to which I have the DIR-655 router connected. I am able to connect to both WiFi's fine and they work correctly.I think the Verizon router is set to block incoming VPN connections and I think this is why I cannot get anyone to be able to access my computer / internet via VPN. How I can perhaps forward ports and which settings I would need to specifically change in both routers admin settings so that I can get VPN connections to forward to my computer and be accepted.
Region : UnitedStates Model : TL-WDR4300 Hardware Version : V1 Firmware Version : Latest ISP :
The UDP connections are being blocked when I use my VPN. I can connect for a while but soon after a while, the connection doesn't work. I can't even access the router page.
apparantly there is a bug in WAG160Nv2 firmware (version:V2.00.20 which is the latest). we had problem connecting to an outside smtp server using telnet. then out of frustration i reset the router to factory settings. then suddenly connecting to smtp server on port 25 was not a problem. then a few hours later, without doing any special changes to the settings, it's now again not possible to telnet to external server. apparantly something prevents outbound connections to port 25 to be established
I have 2 sites connected by a site-to-site IPSec VPN link using ASAs. (ASA5505 and ASA5510 at sites A and B respectively.) There is a UDP data stream that feeds into a Site A server from the internet (packets arrive on the Site A outside interface and NAT is applied to forward to Server A). I need the Site A ASA to redirect these UDP packets over the VPN link to a Site B server instead of to the Site A server.
The source devices can not be reprogrammed with the Site B outside IP. The VPN tunnel is working, Server A can communicate with Server B.
i have with my Edimax router. I could not make any progress with Edimax personnel in Taipei.
If i connect my vista box directly w/o the router, i can see that port 21 (Filezilla) is open, using WhatsMyIP.org | Port Scanners/Sniffers
When I insert the Edimax br6215srg router, the port is in timeout as reported by aforementioned site (guess the port scanner gets no synack nor reset back to the syn it sends)
The router is set to "disable firewall" or to "enable firewall and DMZ enabled" with as client's ip the one that is configured in the router's dhcp table for the vista box. The NAT module is set to forward port 21 to the same ip. ipconfig confirms that i do get the ip programmed in the router's dhcp table.
I do not want to believe that this edimax box is unable to forward connections!
I recently moved house to a flat where I now have an adsl wireless router. Ever since I installed it its been major problems for me, my speeds are terrible takes ages to load a webpage and days to download anything. Also I have tried to stream to my apple tv through the use of airplay mirroring but this again doesn't work and an error code appears every time which I then looked up and it says its to do with my firewall blocking incoming connections. I have gone to my routers settings to try change this and it says to select the options by clicking the radio buttons however they do not exist on the page as you can see on the screenshot below.
I need to block 4000 nodes (Ultrasurf, TOR exit nodes) and I've written a script that will ssh and copy in these objects (prob 100 at a time) into an object group and then put a blanket deny. I don't see a flood of traffic (occassional hits every other day, etc) but I was wondering what the impact would be? Can the ASA handle an object group of that size plus an ACL with it? Any way to block incoming connections from TOR/Ultrasurf?
I have a Cisco 3745 that is my internet router, I have a domain that directs the web address to the WAN IP address...Can I set up my 3745 to forward incoming connections to my server?
We have a Cisco 2911 Router and have configured via BT Infinity Broadband for out going internet access etc. Are there any incoming restrictions ACL settings etc. that will stop us using for ISA VPN, Exchange connections, Intranet, Sharepoint etc. We have reserved 13 Static IP Addresses from the ISP.
Does the Host file allow connections to your computer?Although I have placed some server names into the host file, Wallwatcher 5.0 is indicating that those servers have made connections. This didn't seem to be a problem before I took some online advice to add servers to my host file. I use iptables on a WNDR3700 router with DD-WRT firmware. In the iptable rules I've also blocked these servers. One example is cnbc7.net and a couple of U.S. Akamai servers.
I was at my computer when the desktop appearance and taskbar changed. I immediately opened task manager to see what program might have caused this and didn't see anything out of the ordinary. Then about 2 minutes later my desktop changed back to what it normally is. I then went and disabled remote desktop connections... I think that someone may have accessed my pc remotely, buy I wasn't able to catch them at it. Is there any way to review incoming remote desktop connections historically?
Is there any sort of "hardening-guide" re: preventing people from hacking the DIR-825? I've done the obvious (to me) things, but I'm wondering what the risk is.I'm also interested in how good the DIR-825 is, security-wise, compared with Linksys equivalent routers.Seeming limitations on the admin password has me concerned url...
I would like to block incoming traffic from a specific ip on a specific port
This is what I have
source: interface: wan ip address range: 5.xxx.xxx.226 - second one is empty (valid ip instead of x's) protocol: tcp
dest: interface: lan ip address range: both fields empty port range: 139 - empty field
ON and DENY box is ticked name field has some text in it
I click save and get this pop-up: Incorrect source ip address. Invalid format of the start IP address. Current Firmware Version : 2.11 The ip is obviously valid, what should I do?
I need to block incoming traffic with Dlink DIR 600. I know how to create the rule source (WAN) to destination (LAN) to deny all protocols. But what IP will I put in WAN? IP address of my Internet? Or how can I enter the ALL IP range in source...format for the IP (it's not 0.0.0.0).
I want to do this because in the DIR log section I'm being PING Flooded. I already un-check "Enable WAN Ping Response" but still receiving the message.
UPnP renew entry 255.255.255.255 <-> 68.98.71.182:61041 <-> 192.168.0.197:61041 UDP timeout:-1 'Teredo' (this one repeated 13 times just in that 1 info slot)
Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.197 to 109.185.100.195
Blocked incoming TCP packet from 108.170.42.83:80 to 68.98.71.182:36792 as SYN:ACK received but there is no active connection
this goes on for a multiple of different ip's and i believe its due to the fact that the game i play is p2p
QoS is off spi is off udp and tcp endpoint independent firmware version 1.21 i am using wireless cable isp using motorola sb5101 i believe i port forwarded the ports used for the game but that didnt work so i put my computer into dmz. I've also noticed a lot more jitter then i used to have and my upload speed is down about 4mbps. Was thinking it might just be outdated firmware?
Yesterday I had the snapshots setup to be sent to my gmail account and now they've been blocked as spam. Is there anyway to get around this? The motion detection area is set to 90% so I see why I'm getting a bunch of snapshots. Is there a setting I can change on my gmail account or is the only option to reduce the percentage? I'd prefer to get all of the emails.
Is it possible to get both allowed and blocked web access logging? I'm using the 2.06NA firmware and no matter how I configure the router, I just can't get it to work, so either I'm missing something or the firmware has a defect, I hope its me, but I fear its a defect.
I'm new to networking (at least at this level) and need some guidance. First, I have an Actiontec MI424WR (Rev. F) Coax Verizon Fios modem that I use as my home networking wireless router. From a LAN port on that I've connected a cable to the WAN port on my DIR-655 which acts as my gigabit office hard wire/wireless router. I need to keep the home network and the office network separate.All of my computers are Windows, either 7, Vista or XP.Connected to my Dir-655 on the office network are 2 wireless computers, a printer, an IOMEGA 1TB Home Personal Cloud NAS HDD, plus 2 desktop computers.The DIR-655 is set with a static IP address matching the range of the Actiontec. The DIR-655 is set for DHCP for the devices on the network (although 2 of the computers have static IP address).
When the DIR-655 had a Dynamic IP address set by the Actiontec, the IOMEGA NAS HDD kept losing connection with all the devices on the network. Only after I set the DIR-655 to static IP did that stop and everybody started to play nice. I'm not sure why that would make a difference, but it did.But regardless of whether it is set to dynamic or static, no computer on the network or program, even third party programs, can connect to ANY of the time servers out there... and I mean any of them. I've tried at least 20 or more of the standard and not so standard ones. The DIR-655's time is off, and it is set to get time automatically. None of my computers, or my IOMEGA NAS, can access time. The Actiontec, though, seems to be set correctly.Everything connects to the internet just fine. Web, email, auto product upgrades. Fine. So far it's just the time server thing which troubles.I done everything I know how to do to enable Port Forwarding through both routers for NTP > UDP 123 since that is the standard port for the Network Time Protocol, but I could have easily screwed that up.
Region : UnitedKingdom Model : TD-W8951ND Hardware Version : V1 Firmware Version : Latest ISP :
In trying to make sure it was NOT wide open to the internet (amongst many other problems of setting it up, which I ,may address later if I can actually connect to the thing ever again) I told it to only accept connections from a range of address inside the LAN. Now it wont accept anything except telnet from the LAN.Short of wiping out 6 hours of trial and error configuration and resetting it, are there any other options I can exercise via the telnet interface?
I'm trying to set up a website filter on my DIR-601. I created a policy for 2 MAC addresses, with a schedule from 10AM-6PM, selected "Block some websites", and disabled logging. Under website filter, I added some entries, and selected "DENY computers access to ONLY these sites". When the policy is enabled, and I try to access one of the blocked websites, it gets blocked correctly ("The URL access was denied by administrator.") However, for all other websites, I get "server unexpectedly dropped the connection" errors, eg "Safari can�t open the page [URL] because the server unexpectedly dropped the connection. This sometimes occurs when the server is busy. Wait for a few minutes, and then try again." or in Chrome "No data received. Unable to load the webpage because the server sent no data." This happens with ALL non-blocked websites. I'm using hardware version A1, firmware version 1.01NA.
I having a basic query in troubleshooting E1 link , here im facing packet drop in the link and we are testing by providing local loop and remote loop from the CSU/DSU at local point and at remote point . I have tried ping test while the loop is given at local point and remote point ie i have pinged my local serial interface IP address (eg 10.0.0.1 -local & 10.0.0.2 -remote ) in Remote Loop i could see no errors and drops and also the traffic on the interface output and input is the same(eg input rate 1000bps and output rate 1000bps) .My query is that when i am pinging the local interface IP does the icmp packet travels till the loop point and comes to the same interface(like a boomerang) .
ICMP packet ->->->->->->->->->->->->->->-> R1 Local CSU/DSU | Remote CSU/DSU (remote loop given )
I have two routers, Cisco 3825 and 2811 connected via a p2p ethernet link. The two sides of the links have Huawei muxes with 100/ full duplex set on their interface. I am facing almost 40% packet loss but the supplier is unable to identify any issues at their end. We have tried setting different combinations of duplex and speed settings but no improvement. When set to auto/auto the interfaces are negotiating to half duplex and I am sure this is the cause of the packet loss. Also I heard of auto-negotiation on MUX ports but supplier confirmed no such settings but only 100 Full duplex. If the router iterface is negotiating to half duplex so I suppose there is some thing with the negotition problem with MUX and router port ?
On C3825 I have a Gig interface whileas C2811 has fastEthernet. I guess Gig interface should not negotiate ? Is there a way to pin point the exact fault to supplier ? Also is there work around for this?
Where internet connection strength is shown in main screen there is a yellow triangle with a black exclamation Mark in it covering the signal strength icon. I have tried contacting my Internet provider who could not fix. They have sent a new modem but still same issue on pc. I have several games consoles and also have an iPad and iPhone and Internet is working on these however my neighbour tried to use her laptop in my house and has the same issue.
prevent someone from putting their computer on a network with a static ip that is already on the network so it does not cause a conflict. I'll try to do the short version of what happeend (ip numbers wont be accurate) has his laptop with him set to a static ip of 192.168.0.1 and connects it to our network and our file server which is also the dhcp and dns is set to that ip address. So when he connected it it basically brought down our whole network....
Home Group on Windows 7. I have added a room mate to my home group (just two of us in group). I don't want either of us to be able to view or share files, folders, etc. I think I've done everything on my end: turned off Network Discovery; turned off file and printer sharing; turned off Public Folder sharing. Also turned off automatic file/printer sharing in Norton firewall.
1) do I need to do anything else, and;
2) what does room mate have to do on his computer (if anything)?
I've spent quite a bit of time trying to figure this out on my own but somehow I don't feel quite sure that all my files/folders are not viewable by anyone else.
