Re: Multiple Access Warnings on Smoothwall

[ssouth]

Re: Multiple Access Warnings on Smoothwall

 

Hi All

 

I'm sure we have all had them, but I seem to be getting lots of "Warning have detected 1000 accesses to IP address ......... in the last 15 minutes on the Smoothwall dashboard.

 

They are all to our external IP addresses.

 

Is there anything I can do about this or do I need to be concerned?

 

Thanks in advance for any advice.

 

Regards

[Aprice]

I would just take a quick look at your firewall rules as a matter of course, check there isn't anything allowed through that shouldn't be. If in doubt I'd log a ticket with them and get them to take a look, they've always been quite good technically, but that's if you can actually get hold of someone!

 

I don't think this is something to worry massively about, we used to get it internally from the legacy Dahua NVR trying to phone home to China, I just put a deny all on it's IP and took it's gateway address out which stopped it.

[ibpalle]

The alerts can be adjusted from the reports - alerts - alert settings. I normally turn that alert off as I see it being used to monitor external blocks after a DOS attack or similar.