провайдер: ЮТК
соединение: PPPoA (интернет)
схема подключения: dsl-2500u + des-1005d + два PC
прошивка: 2100 обновил до 3B00 (
проблема осталась)
отоброжения лога: Debugging
лог
Код:
Jan 13 07:10:37 syslog info -- MARK --
Jan 13 07:19:19 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=195.5.116.235 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=118 ID=10006 PROTO=TCP SPT=19577 DPT=1080 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 07:25:17 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=63675 DF PROTO=TCP SPT=16824 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 07:30:12 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=8998 DF PROTO=TCP SPT=18101 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 07:42:43 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=36235 DF PROTO=TCP SPT=22015 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 07:52:30 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=56584 DF PROTO=TCP SPT=24966 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 08:09:29 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=28617 DF PROTO=TCP SPT=27789 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 08:10:36 syslog info -- MARK --
Jan 13 08:13:16 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=77.51.14.202 DST=87.117.49.18 LEN=52 TOS=0x00 PREC=0x20 TTL=120 ID=49253 DF PROTO=TCP SPT=1898 DPT=23652 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 08:21:04 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=52053 DF PROTO=TCP SPT=29680 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 08:40:20 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=8931 DF PROTO=TCP SPT=32722 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 08:40:23 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=9212 DF PROTO=TCP SPT=32722 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 08:56:47 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=195.46.154.82 DST=87.117.49.18 LEN=64 TOS=0x08 PREC=0x40 TTL=28 ID=47844 DF PROTO=TCP SPT=33037 DPT=25 WINDOW=53760 RES=0x00 SYN URGP=0
Jan 13 09:03:01 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=7816 DF PROTO=TCP SPT=40136 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 09:10:36 syslog info -- MARK --
Jan 13 09:12:33 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=11306 DF PROTO=TCP SPT=46001 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 09:28:57 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=36442 DF PROTO=TCP SPT=56598 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 09:32:27 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=61807 DF PROTO=TCP SPT=59000 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 09:51:39 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=81.91.40.2 DST=87.117.49.18 LEN=48 TOS=0x08 PREC=0x40 TTL=119 ID=34941 DF PROTO=TCP SPT=63635 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 09:51:42 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=81.91.40.2 DST=87.117.49.18 LEN=48 TOS=0x08 PREC=0x40 TTL=119 ID=35098 DF PROTO=TCP SPT=63635 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 10:00:18 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=212.26.255.11 DST=87.117.49.18 LEN=48 TOS=0x00 PREC=0x20 TTL=113 ID=40096 DF PROTO=TCP SPT=64394 DPT=42583 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 10:10:36 syslog info -- MARK --
Jan 13 10:10:43 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=87.70.32.250 DST=87.117.49.18 LEN=60 TOS=0x00 PREC=0x20 TTL=50 ID=42958 DF PROTO=TCP SPT=56625 DPT=12345 WINDOW=5840 RES=0x00 SYN URGP=0
Jan 13 10:20:13 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=85.159.45.123 DST=87.117.49.18 LEN=48 TOS=0x08 PREC=0x40 TTL=117 ID=3638 DF PROTO=TCP SPT=1907 DPT=12345 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 10:30:11 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=194.44.246.166 DST=87.117.49.18 LEN=48 TOS=0x08 PREC=0x40 TTL=112 ID=7792 DF PROTO=TCP SPT=2061 DPT=12345 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 13 10:40:12 user alert kernel: Intrusion -> IN=ppp_0_35_1 OUT= MAC= SRC=92.112.206.172 DST=87.117.49.18 LEN=48 TOS=0x08 PREC=0x40 TTL=110 ID=9694 DF PROTO=TCP SPT=2058 DPT=12345 WINDOW=55808 RES=0x00 SYN URGP=0
в промежутке с 7 до 10 оба компьютера были выключены
соединение проподает примерно на 20 секунд
Что это может быть и как с этим боротся ?