uctip 发表于 2005-8-18 18:51:09

大家来看看我的日志，帮我分析分析！谢谢！

user admin logged out from ***.***.***.167 via web in 18-Aug 17:30:49.25 from 192.168.8.1
received ISAKMP packet from ***.***.***.190:500, phase 1, Identity Protection in 18-Aug 18:26:27.76 from 192.168.8.1
responding phase 1, starting mode Identity Protection (local ***.***.***.82:500) (remote***.***.***.190:500) in 18-Aug 18:26:28.53 from 192.168.8.1
received ISAKMP packet from ***.***.***.190:500, phase 1, Identity Protection in 18-Aug 18:26:28.60 from 192.168.8.1
received ISAKMP packet from ***.***.***.190:500, phase 1, Identity Protection in 18-Aug 18:26:28.89 from 192.168.8.1
Initial-Contact Notification payload, ignoring (remote unknown) in 18-Aug 18:26:28.89 from 192.168.8.1
ISAKMP SA established (local ***.***.***.82:500) (remote ***.***.***.190:500) in 18-Aug 18:26:28.89 from 192.168.8.1
received ISAKMP packet from ***.***.***.190:500, phase 2, Quick in 18-Aug 18:26:29.46 from 192.168.8.1
responding phase 2 (src ***.***.***.82) (dst ***.***.***.190) in 18-Aug 18:26:29.46 from 192.168.8.1
no policy found (remote unknown) in 18-Aug 18:26:29.51 from 192.168.8.1
no proposal found (remote unknown) in 18-Aug 18:26:29.51 from 192.168.8.1
failed to pre-process packet (remote unknown) in 18-Aug 18:26:29.51 from 192.168.8.1
received ISAKMP packet from ***.***.***.190:500, phase 2, Quick in 18-Aug 18:26:33.39 from 192.168.8.1
responding phase 2 (src ***.***.***.82) (dst ***.***.***.190) in 18-Aug 18:26:33.39 from 192.168.8.1
no policy found (remote unknown) in 18-Aug 18:26:33.39 from 192.168.8.1
no proposal found (remote unknown) in 18-Aug 18:26:33.39 from 192.168.8.1
failed to pre-process packet (remote unknown) in 18-Aug 18:26:33.42 from 192.168.8.1
received ISAKMP packet from ***.***.***.190:500, phase 2, Quick in 18-Aug 18:26:41.42 from 192.168.8.1
responding phase 2 (src ***.***.***.82) (dst ***.***.***.190) in 18-Aug 18:26:41.42 from 192.168.8.1
no policy found (remote unknown) in 18-Aug 18:26:41.42 from 192.168.8.1
no proposal found (remote unknown) in 18-Aug 18:26:41.42 from 192.168.8.1
failed to pre-process packet (remote unknown) in 18-Aug 18:26:41.42 from 192.168.8.1
received ISAKMP packet from ***.***.***.190:500, phase 2, Quick in 18-Aug 18:26:57.43 from 192.168.8.1
responding phase 2 (src ***.***.***.82) (dst ***.***.***.190) in 18-Aug 18:26:57.43 from 192.168.8.1
no policy found (remote unknown) in 18-Aug 18:26:57.43 from 192.168.8.1
no proposal found (remote unknown) in 18-Aug 18:26:57.43 from 192.168.8.1
failed to pre-process packet (remote unknown) in 18-Aug 18:26:57.43 from 192.168.8.1
---------------------------------------------------------------------------------------------------------------------------
谢谢了！

dickyys 发表于 2005-8-18 19:10:22

把tcp udp 的500端口关闭

uctip 发表于 2005-8-19 15:32:37

晕

182248531 发表于 2006-5-9 16:00:42

小弟刚学的
请教
哪位大哥告诉我如何135之类的端口

专卖精品 发表于 2006-5-9 23:20:05

允许特定的IP进入，其他一律DROP！！！！
页: [1]
查看完整版本: 大家来看看我的日志，帮我分析分析！谢谢！