Bitdefender Internet Security 2011 Vs 3com Router

MProveti
MProveti
in Old topics

Hello everybody,


I purchased and installed BitDefender Internet Security on my machine and something weird started to happen. Connection was lost after 10 or 15 minutes after turned on. I had to rebbot the modem and the router and more ten minutes the connection failed to perform.


After 3 days and a lot of tests, I found out:


Bitdefender firewall ENABLED and 3com router firewall ENABLED - Connection lost;


Bitdefender firewall DISABLED and 3com firewall ENABLED - Connection lost;


Bitdefender firewall ENABLED and 3com firewall DISEABLED - Ok.


But the main problem I discovered when doing the tests regards to when both firewalls were ENABLED I could monitoring SYN FLOODS Incomming and Outgoing. When I disabled 3Com firewall the flows stop. Enabled again and the flows continue.


I dont know Why and I can see nosense at this issue.


For sure the connection is fine for now with 3com firewall desabled but I'm not sure I'm really safe...


Can everyone help me and explain me this issue?


Thanks in advance.


HP PAVILION DV6 3090br, AMD Phenom II Quad Core P920, 6Gb Ram, ATI Mobility Radeon 5650, Win7 Professional


Log file for 3com router firewall. Dates are not right.


12/18/2004 08:53:19 **SYN Flood** 192.168.1.6, 50329->> 149.5.168.18, 80 (from PPPoE1 Outbound)


12/18/2004 08:53:18 **SYN Flood** 90.18.11.117, 58738->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:18 **SYN Flood** 216.55.215.57, 53533->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:16 **SYN Flood** 192.168.1.6, 50325->> 149.5.168.18, 80 (from PPPoE1 Outbound)


12/18/2004 08:53:16 **SYN Flood** 129.31.71.96, 60453->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:15 **SYN Flood** 151.205.108.16, 50733->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:15 **SYN Flood** 192.168.1.6, 50319->> 149.5.168.18, 80 (from PPPoE1 Outbound)


12/18/2004 08:53:14 **SYN Flood** 99.252.47.71, 64499->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:13 **SYN Flood** 89.90.173.193, 62302->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:12 **SYN Flood** 90.30.177.62, 62824->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:12 **SYN Flood** 192.168.1.6, 50313->> 149.5.168.18, 80 (from PPPoE1 Outbound)


12/18/2004 08:53:10 **SYN Flood** 94.6.28.67, 54353->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:10 **SYN Flood** 67.182.205.246, 65462->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:09 **SYN Flood** 72.183.121.251, 53662->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:09 **SYN Flood** 66.41.212.43, 52470->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:09 **SYN Flood** 24.51.61.26, 60525->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:53:09 **SYN Flood** 75.158.35.119, 61501->> 201.29.3.75, 8881 (from PPPoE1 Inbound)


12/18/2004 08:41:01 **SYN Flood** 192.168.1.6, 49741->> 216.33.197.61, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:59 **SYN Flood (per Min)** 192.168.1.6, 49737->> 91.199.104.21, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:59 **SYN Flood** 192.168.1.6, 49737->> 91.199.104.21, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:58 **SYN Flood (per Min)** 192.168.1.6, 49741->> 216.33.197.61, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:58 **SYN Flood** 192.168.1.6, 49741->> 216.33.197.61, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:57 **SYN Flood (per Min)** 192.168.1.6, 49740->> 80.86.106.140, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:57 **SYN Flood** 192.168.1.6, 49740->> 80.86.106.140, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:56 **SYN Flood (per Min)** 192.168.1.6, 49738->> 64.233.163.96, 443 (from PPPoE1 Outbound)


12/18/2004 08:40:56 **SYN Flood** 192.168.1.6, 49738->> 64.233.163.96, 443 (from PPPoE1 Outbound)


12/18/2004 08:40:54 **SYN Flood (per Min)** 192.168.1.6, 49740->> 80.86.106.140, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:54 **SYN Flood** 192.168.1.6, 49740->> 80.86.106.140, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:40 **SYN Flood (per Min)** 192.168.1.6, 49643->> 216.33.197.56, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:40 **SYN Flood** 192.168.1.6, 49643->> 216.33.197.56, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:40 **SYN Flood** 192.168.1.6, 49616->> 216.33.196.61, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:30 **UDP Flood (per Min) Stop** (from PPPoE1 Outbound)


12/18/2004 08:40:30 **UDP Flood Stop** (from PPPoE1 Outbound)


12/18/2004 08:40:27 **SYN Flood (per Min)** 192.168.1.6, 49572->> 200.216.69.253, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:27 **SYN Flood** 192.168.1.6, 49572->> 200.216.69.253, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:27 **SYN Flood (per Min)** 192.168.1.6, 49569->> 91.199.104.21, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:27 **SYN Flood** 192.168.1.6, 49569->> 91.199.104.21, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:25 **SYN Flood (per Min)** 192.168.1.6, 49567->> 216.33.196.51, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:25 **SYN Flood** 192.168.1.6, 49567->> 216.33.196.51, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:24 **SYN Flood (per Min)** 192.168.1.6, 49572->> 200.216.69.253, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:24 **SYN Flood** 192.168.1.6, 49572->> 200.216.69.253, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:24 **SYN Flood (per Min)** 192.168.1.6, 49569->> 91.199.104.21, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:24 **SYN Flood** 192.168.1.6, 49569->> 91.199.104.21, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49558->> 69.54.140.121, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49558->> 69.54.140.121, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49561->> 67.170.172.94, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49561->> 67.170.172.94, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49559->> 68.229.227.107, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49559->> 68.229.227.107, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49557->> 69.73.58.177, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49557->> 69.73.58.177, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49560->> 68.46.119.150, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49560->> 68.46.119.150, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49554->> 70.243.243.217, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49554->> 70.243.243.217, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49553->> 71.0.26.159, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49553->> 71.0.26.159, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49556->> 69.243.168.11, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49556->> 69.243.168.11, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood (per Min)** 192.168.1.6, 49555->> 70.136.26.171, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:23 **SYN Flood** 192.168.1.6, 49555->> 70.136.26.171, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:22 **SYN Flood (per Min)** 192.168.1.6, 49551->> 71.185.41.229, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:22 **SYN Flood** 192.168.1.6, 49551->> 71.185.41.229, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:22 **SYN Flood (per Min)** 192.168.1.6, 49552->> 71.62.40.159, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:22 **SYN Flood** 192.168.1.6, 49552->> 71.62.40.159, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:22 **SYN Flood (per Min)** 192.168.1.6, 49567->> 216.33.196.51, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:22 **SYN Flood** 192.168.1.6, 49567->> 216.33.196.51, 80 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood (per Min)** 192.168.1.6, 49566->> 134.88.153.232, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood** 192.168.1.6, 49566->> 134.88.153.232, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood (per Min)** 192.168.1.6, 49565->> 65.48.164.23, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood** 192.168.1.6, 49565->> 65.48.164.23, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood (per Min)** 192.168.1.6, 49564->> 65.82.215.38, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood** 192.168.1.6, 49564->> 65.82.215.38, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood (per Min)** 192.168.1.6, 49563->> 65.173.16.73, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood** 192.168.1.6, 49563->> 65.173.16.73, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood (per Min)** 192.168.1.6, 49562->> 66.112.189.186, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood** 192.168.1.6, 49562->> 66.112.189.186, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood (per Min)** 192.168.1.6, 49550->> 74.97.255.198, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:21 **SYN Flood** 192.168.1.6, 49550->> 74.97.255.198, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:20 **SYN Flood (per Min)** 192.168.1.6, 49548->> 75.192.211.237, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:20 **SYN Flood** 192.168.1.6, 49548->> 75.192.211.237, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:20 **SYN Flood (per Min)** 192.168.1.6, 49549->> 75.152.99.11, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:20 **SYN Flood** 192.168.1.6, 49549->> 75.152.99.11, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:20 **SYN Flood (per Min)** 192.168.1.6, 49546->> 76.26.18.215, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:20 **SYN Flood** 192.168.1.6, 49546->> 76.26.18.215, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:20 **SYN Flood (per Min)** 192.168.1.6, 49547->> 76.24.96.8, 8881 (from PPPoE1 Outbound)


12/18/2004 08:40:20 **SYN Flood** 192.168.1.6, 49547->> 76.24.96.8, 8881 (from PPPoE1 Outbound)


12/18/2004 08:37:28 192.168.1.6 login success


12/18/2004 08:32:56 sending ACK to 192.168.1.6


12/18/2004 08:08:41 PPPoE1 get IP:201.29.3.75


12/18/2004 08:08:41 Username and Password: OK


12/18/2004 08:08:41 PPPoE1 start PPP


12/18/2004 08:08:41 PPPoE receive PADS


12/18/2004 08:08:41 PPPoE send PADR


12/18/2004 08:08:41 PPPoE receive PADO


12/18/2004 08:08:41 PPPoE send PADI


12/18/2004 08:08:26 sending ACK to 192.168.1.3


12/18/2004 03:18:15 PPPoE stop


12/18/2004 03:18:15 PPPoE1 stop PPP


12/18/2004 00:46:58 sending ACK to 192.168.1.3


12/18/2004 00:46:49 sending ACK to 192.168.1.3


12/18/2004 00:46:45 sending ACK to 192.168.1.3


12/18/2004 00:36:52 PPPoE1 get IP:201.29.4.153


12/18/2004 00:36:52 Username and Password: OK


12/18/2004 00:36:52 PPPoE1 start PPP


12/18/2004 00:36:52 PPPoE receive PADS


12/18/2004 00:36:52 PPPoE send PADR


12/18/2004 00:36:52 PPPoE receive PADO


12/18/2004 00:36:52 PPPoE send PADI


12/18/2004 00:36:08 sending ACK to 192.168.1.3


12/18/2004 00:36:00 sending ACK to 192.168.1.3


12/18/2004 00:35:57 sending ACK to 192.168.1.3


12/18/2004 00:00:15 PPPoE send PADI


12/18/2004 00:00:10 PPPoE send PADI


12/18/2004 00:00:05 PPPoE send PADI


12/18/2004 00:00:00 PPPoE send PADI


12/18/2004 00:00:00 Dial On Demand(PPPoE1)

Comments

  • Unknown
    Unknown
    edited October 2010

    Hello,


    Try to add the router's IP into the Network Zones under Firewall -> Network module. You can find the steps below:


    1. Open BitDefender and switch to Expert View from the Options button;


    2. Go to Firewall module then on to Network


    3. There make the following changes for the connected network adapter:


    - Network Type: Home/Office


    - VPN: No


    - Stealth: Remote


    - Generic: Yes


    Below Network Zones double click on the connected adapter and add the router's IP as trusted (allowed) as shown in the attached screenshot.


    Let me know if the issue was resolved after following the above steps.

    post-20064-1287669387_thumb.jpg

  • MProveti
    MProveti
    edited October 2010

    Hi man,


    First of all thanks for your support.


    Just no way.


    I followed your instructions and when turned router firewall ON the connection failed. Turned OFF and voilá.. Connection on.


    The difference between that way and the previous one regards to connection held a little bit more. The Synfloods incoming and outgoing drastically reduced but they were still there and Land Attacks were found.


    Connection runs very well when router firewall is DISABLED. But here is the point: I know everything appearing in my router security log is shown because its blocking those syns... but once its firewall is DISABLED the internet connection runs perfectly but I still don't know if Synflood and Land attacks continues. I'd like to remember that it only happens when Bitdefender is installed. (those 3 days of tests I've made).


    I guess firewalls are in conflict. I remember when installing bitdefender to read the recommendation to disabled any firewall.. or something like that.


    Seeya and thanks again.

  • Unknown
    Unknown

    Hi,


    Indeed the two firewalls are in conflict. If you wish a higher security level when it comes to the Firewall module you can enable the Strict automatic rules (restrict rule scope) option in Firewall -> Advanced Settings. Also, as you have disabled the router firewall you can also enable the log verbosity in the BitDefender Firewall. Last but not least you can check the number of packets dropped displayed in the main Firewall windows (Settings tab).

  • MProveti
    MProveti

    Great man...


    You are THE guy..


    Thanks again.

This discussion has been closed.

All Time Leaders

Categories

Defenders of the month