OK, here is what I got.
My SEP is 11.0.4202.75.
I reset the Buffalo WHR-HP-G300N and just setup the PPPOE and disable UPnP. (by my PC of course). Also check there is no port forwarding set.
As soon as I connect my T60 to the router, the SEP blocks the router IP, 192.168.11.1, Log below.
Somebody is scanning your computer.
Your computer's TCP ports:
21, 80, 8000, 8080 and 3389 have been scanned from 192.168.11.1.
Traffic from IP address 192.168.11.1 is blocked from 2010/6/2 PM 07:29:25 to 2010/6/2 PM 07:34:25.
I wait 5min and still can’t get access to the internet. Then I refresh the log, the router ip is blocked again, log below.
Somebody is scanning your computer.
Your computer's TCP ports:
21, 80, 8000, 8080 and 3389 have been scanned from 192.168.11.1.
Traffic from IP address 192.168.11.1 is blocked from 2010/6/2 PM 07:34:37 to 2010/6/2 PM 07:39:37.
Of course I wait for another 5min but the ip is again blocked for 5min. Then I will never be able to get on line.
I then connect back to my old router, WYR-G54, same default setting, UPnP is ON as default, only configure PPPOE to my ISP.
My T60 soon gets DHCP assigned and connects to the internet. No more log shown in the security log. I noticed the default setting of The Intrusion Detector in my old router is OFF. Not sure if this matters.
I unplug the LAN and manual the DNS to my ISP at 168.95.1.1, and plug back to new router.
Then again, the router scan my T60 and SEP blocks the router ip for 5min and on and on.
-
Please note that I have another router Asus RT-N12 which has exact the same issue. Two routers are from major home router brands and based on different hardware chips.
-
My company admin won’t allow individual to configure the setting thus there is no way I can make my router exceptional.
-
My company admin won’t change the policy for me.
-
I connect to another ISP at another house and the issue is exact the same. I believe you can easily reproduce the issue.
My point is that both routers are very popular home models and from their service centers there is no similar complains. My PC, with avast, works fine with both routers. Isn’t SEP too sensitive to such router behavior?
Let me know what info you need to get the issue fix.