Loot of same intrusion attempts

[Guest]

[Reptil]

Application: windows Operating system
Protocal:  UDP
Source IP:10.4.128.1
Source Port:  67
Destination IP:255.255.255.255
Destination Port:68

Using Default Firewall rules only stealthed ports to everyone.
Will i able obtain IP from my DHCP,and if no is there any way to configure that easy cuz its but confusing to set rules .

[EricJH]

I assume you are on a cable connection. Is that correct?

The alerts are from a bootstrap protocol server to hand out IP addresses. Can you show me the ipconfig information? Go to Start --> Run --> cmd --> enter --> ipconfig --> enter. I assume 10.0.128.1 may be your default gateway.

[Reptil]

Yes Eric Cable connection and got 2 computers conected by wire cable and checked ipconfig 10.0.128.1 is not default gateway.

[Reptil]

I see in firewall events olso much of these:
Application: windows Operating system
Protocal:  UDP
Source IP:Ip of my gateway
Source Port:  67
Destination IP:255.255.255.255
Destination Port:68

[EricJH]

Do you use a router to connect two computers or does one act as gatway (ICS server; Internet Connection Sharing)?

You can safely allow the UDP requests of your gateway making a rule under Global Rules.

Go to Firewall --> Advanced --> Global Rules --> add --> now fill in:
Action: allow
Protocol: UDP
Direction: In
Description: Allow bootstrap on UDP 67/68

Source address: gateway IP
Destination address: MAC address of your computer
Soure port: 67
Destination port: 68
Apply.

Now make sure the new rule is somewhere above the basic block rule(s) (red icon at the bottom).

[Reptil]

Hi Eric dont use ruter other computer is conected bye wire cable from it to my modem.

[Reptil]

Will i need this Global rule if i Apply that:

[EricJH]

Your Global Rules are fine as you show them. Also your logs look fine. Your firewall blocks and logs unsolicited traffic.

[Reptil]

Ok Thank You For helping me Eric.

[Tags:]