Legaev Evgeny писал(а):
Да, сделайте более детальны лог "Отладочные сообщения" и в настройках соединения включите "Отладка РРР"
И какая версия прошивки установлена на модеме?
Включил "Отладка РРР", сделал лог "Отладочные сообщения".
Вот первые результаты. Такое ощущение, что сессия рвется после большого количества вторжений за короткое время. Т.е., когда вторжения идут с периодичностью менее одной минуты.
Jul 6 11:39:51 (none) syslog.emerg BCM CPE started: BusyBox v1.17.2 74
Jul 6 11:41:03 (none) daemon.crit syslog: Clear IP addresses. Connection DOWN. 86
Jul 6 11:41:05 (none) daemon.info syslog: Exit. 54
Jul 6 11:41:08 (none) daemon.notice syslog: pppd 2.4.1 started by admin, uid 0 85
Jul 6 11:41:14 (none) daemon.notice syslog: PPP: Start to connect ... 76
Jul 6 11:41:15 (none) daemon.crit syslog: PPP server detected. 69
Jul 6 11:41:15 (none) daemon.crit syslog: PPP session established. 73
Jul 6 11:41:15 (none) kern.warn kernel: netdev path : 61
Jul 6 11:41:15 (none) kern.info kernel: ppp1 -> atm0 59
Jul 6 11:41:17 (none) daemon.crit syslog: PPP LCP UP. 60
Jul 6 11:41:17 (none) daemon.crit syslog: Received valid IP address from server. Connection UP. 103
Jul 6 11:42:15 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=74.82.47.51 DST=94.138.21.191 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=40565 DPT=80 WINDOW=1480 RES=0x00 SYN URGP=0 MARK=0x8000000 230
Jul 6 11:42:21 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=187.201.15.54 DST=94.138.21.191 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=40882 DF PROTO=TCP SPT=52788 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Jul 6 11:42:24 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=187.201.15.54 DST=94.138.21.191 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=40883 DF PROTO=TCP SPT=52788 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Jul 6 11:44:07 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=106.105.174.52 DST=94.138.21.191 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=54226 DF PROTO=TCP SPT=43318 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000 235
Jul 6 11:44:10 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=106.105.174.52 DST=94.138.21.191 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=54228 DF PROTO=TCP SPT=43318 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000 235
Jul 6 11:52:20 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=92.253.127.193 DST=94.138.21.191 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=42441 PROTO=TCP SPT=49115 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Jul 6 12:05:57 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=197.50.37.153 DST=94.138.21.191 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=9941 DF PROTO=TCP SPT=64974 DPT=3389 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Jul 6 12:16:09 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=58.218.204.245 DST=94.138.21.191 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=38491 PROTO=TCP SPT=9090 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 233
Jul 6 12:22:34 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=14.181.66.20 DST=94.138.21.191 LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=19644 DF PROTO=TCP SPT=42081 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Jul 6 12:28:14 (none) daemon.notice syslog: pppd 2.4.1 started by admin, uid 0 85
Jul 6 12:28:19 (none) daemon.notice syslog: PPP: Start to connect ... 76
Jul 6 12:28:19 (none) daemon.crit syslog: PPP server detected. 69
Jul 6 12:28:20 (none) daemon.crit syslog: PPP session established. 73
Jul 6 12:28:20 (none) kern.warn kernel: netdev path : 61
Jul 6 12:28:20 (none) kern.info kernel: ppp1 -> atm0 59
Jul 6 12:28:21 (none) daemon.crit syslog: PPP LCP UP. 60
Jul 6 12:28:22 (none) daemon.crit syslog: Received valid IP address from server. Connection UP. 103
Jul 6 12:29:32 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=122.0.115.138 DST=94.138.21.191 LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=23011 DF PROTO=TCP SPT=1717 DPT=1433 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Jul 6 12:29:35 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=122.0.115.138 DST=94.138.21.191 LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=25391 DF PROTO=TCP SPT=1717 DPT=1433 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Jul 6 12:30:47 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=78.188.17.203 DST=94.138.21.191 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=37004 DF PROTO=TCP SPT=35194 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Jul 6 12:30:52 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=78.188.17.203 DST=94.138.21.191 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=37005 DF PROTO=TCP SPT=35194 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000 234
Jul 6 12:30:57 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=222.186.34.77 DST=94.138.21.191 LEN=40 TOS=0x00 PREC=0x00 TTL=100 ID=256 PROTO=TCP SPT=6000 DPT=22 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000 230
Jul 6 12:31:19 (none) daemon.crit syslog: Clear IP addresses. PPP connection DOWN. 90
Jul 6 12:31:19 (none) daemon.crit syslog: Clear IP addresses. Connection DOWN. 86
Jul 6 12:31:21 (none) daemon.info syslog: Exit. 54
Jul 6 12:31:24 (none) daemon.notice syslog: pppd 2.4.1 started by admin, uid 0 85
Jul 6 12:31:31 (none) daemon.notice syslog: PPP: Start to connect ... 76
Jul 6 12:31:32 (none) daemon.crit syslog: PPP server detected. 69
Jul 6 12:31:32 (none) daemon.crit syslog: PPP session established. 73
Jul 6 12:31:32 (none) kern.warn kernel: netdev path : ppp1 65
Jul 6 12:31:32 (none) kern.info kernel: -> atm0 55
Jul 6 12:31:34 (none) daemon.crit syslog: PPP LCP UP. 60
Jul 6 12:31:34 (none) daemon.crit syslog: Received valid IP address from server. Connection UP. 103
Jul 6 12:31:39 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=190.255.245.109 DST=94.138.21.191 LEN=48 TOS=0x00 PREC=0x00 TTL=46 ID=28258 DF PROTO=TCP SPT=36106 DPT=23 WINDOW=5440 RES=0x00 SYN URGP=0 MARK=0x8000000 236
Jul 6 12:31:39 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=176.100.84.107 DST=94.138.21.191 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=11837 DF PROTO=TCP SPT=54088 DPT=443 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000 237
Jul 6 12:34:55 (none) daemon.crit syslog: Clear IP addresses. PPP connection DOWN. 90
Jul 6 12:34:55 (none) daemon.crit syslog: Clear IP addresses. Connection DOWN. 86
Jul 6 12:34:57 (none) daemon.info syslog: Exit. 54
Jul 6 12:35:00 (none) daemon.notice syslog: pppd 2.4.1 started by admin, uid 0 85
Jul 6 12:35:07 (none) daemon.notice syslog: PPP: Start to connect ... 76
Jul 6 12:35:08 (none) daemon.crit syslog: PPP server detected. 69
Jul 6 12:35:08 (none) daemon.crit syslog: PPP session established. 73
Jul 6 12:35:08 (none) kern.warn kernel: netdev path : ppp1 -> atm0 73
Jul 6 12:35:10 (none) daemon.crit syslog: PPP LCP UP. 60
Jul 6 12:35:10 (none) daemon.crit syslog: Received valid IP address from server. Connection UP. 103
Jul 6 12:36:06 (none) kern.alert kernel: Intrusion -> IN=ppp1 OUT= MAC= SRC=186.115.192.174 DST=94.138.21.191 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=1339 DF PROTO=TCP SPT=54065 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 MARK=0x8000000 235