CIS with ARP set under Firewall

[Nige_39]

First of all,

I have set for Cis 7 Enable Anti-APR spoofing set. Under the Firewall section.

But I am noticing That Network Intrusions: Keeps says 1 and sometimes 2. < That is seen on the front Menu where you see other Icons I.E. Last Updated etc. However sometimes it does not say anything under Network Intrusions.

Therefore I thought I report it anyway. The info of what I do see is below.

So when I look at the view log it shows me (Date/Time), then (Application) Windows Operating System (Action) Blocked (Target) In (Protocol) ARP (Source IP) shows 192.168.1.1 < That is my Router Address (Source Port) Blank (Destination IP) 192.168.1.1

So what I am thinking is Anti-APR Blocking my Router ?

So if you think it is, then tell me? If yes How do I work around keeping Anti-APR active, by setting my router IP to be Allowed In CIS 7 instead of it Blocked.

Hope this helps regards

Nigel

I fixed the topic title, it now correctly states ARP. Eric

[jenny66]

@Nige_39 post:1

I have set for Cis 7 …
The Reason why I ask, is due my Internet being slower than it should. As in I should be getting 9.96Mbps but I am only getting 6:73Mbps. < So if you think that it’s not that, that is not slowing down my connection. Let me know.
P.S.S. I have disabled and run a speedtest, and I notice my speed slightly lower at 6.71Mbps, (If I have CIS 7 ON) it shows 6.73Mbps <some extra info for you.

I certainly precisely don’t know.
Itself I didn’t check.
But I can assume that if only URL filtration in 7 beta. ???

[Nige_39]

@jenny66 post:2

I certainly precisely don’t know.
Itself I didn’t check.
But I can assume that if only URL filtration in 7 beta. ???

Thanks Jenny66, Maybe it’s that, but I guess we will know soon

Edit: I Removed my last info on Speedtest since it was going off topic, However there an issue somewhere on my Connection. but I will know more since I provided information on my last 2 posts.

[worldwidewiretap]

Nige_39, I’m curious if you were to change the ip of the system that is blocking the ARP request to an ip outside of your DHCP range if this would stop the request.

[Nige_39]

@worldwidewiretap post:4

Nige_39, I’m curious if you were to change the ip of the system that is blocking the ARP request to an ip outside of your DHCP range if this would stop the request.

Hi worldwidewiretap, I understand what you mean, However I have a Static IP, and for me to change the IP is rebooting Router, Or disabling my LAN.

So with what your saying, it may still not work.

[Nige_39]

On the New RC version of CIS 7.0.312140.4101 Also this happened on Last version of CIS 7.0.308911.4080

The APR is still blocking my Router IP.

Screen shot below.

Capture 3 Info > Taken from View Logs Today
Capture 4 Info > Taken from View Logs inside CIS
Capture 5 Info > Taken from Front Menu of CIS

So after looking at this info shown. Should I Uncheck APR or Leave it Checked, according to Chiron Guide.

Also on Capture 5 That is what shows up to now on Network Intrusions

Hope this helps

Regards

Nigel

[attachment deleted by admin]

[Nige_39]

Since I have done my last post with details

The Network Intrusions has jumped from 2, to 10

So at current it shows 10 Network Intrusions and under View Logs it shows the same info like Capture 3 in my last post

Also Capture 4 shows 20 Network activities blocked. At this present time, like info shown in my last post.

Nige

[Nige_39]

New Updated

It now shows 30 Network Intrusions Blocked Like shown on Capture 5 and it has to other IP address shown, and the 6 look like my ISP.

So Now Under CIS View Logs 40 Network activities blocked like shown on Capture 4

Last updated shown by Last Edit

[juuki]

Have same problem but with different IP (my computer IP is 192.168.000.011 and im only connected to my network).
In attachment are logs.

[attachment deleted by admin]