2

I have installed Snort IDS and most alarm is:

"COMMUNITY SIP TCP/IP message flooding directed to SIP proxy"

And i use home DSL Internet connection , should i be worried about this alarm ?

I have read this article but i couldn't understand it completely?

I set firewall on my router and I've block WAN to LAN connections, how these kind of packet pass it inside ?!!

gold member
  • 21
  • 6

1 Answers1

1

Is it possible that you are using an old snort version? Please see here: http://ubuntuforums.org/archive/index.php/t-1469108.html

Otherwise it would be great if you refine your question with some Firewallrules (Inbound) or some PCAP Files from wireshark.

Dr.Ü
  • 1,029
  • 8
  • 16