RV082 VPN logs looks like an attack

Unanswered Question
Mar 5th, 2010
User Badges:

Hi,

I´m seeing this lines in the VPN Log of our RV082.


My questions are:

  • is if these are normal logs or if it could be an attack?
  • is there any exploit for RV082 that I should be aware of?
  • can I disable VPN completelly?


I'm not expeting any client connecting to the RV082.


My router: RV082 with firmware 2.0.0.19-tm


Here are the logs, the repeats every day, every few hours. Please note the same timestamp in some entries


Mar  5 08:25:21 2010    VPN Log   Received Vendor ID payload Type = [Dead Peer Detection]
Mar  5 08:25:21 2010    VPN  Log   [Tunnel Negotiation Info] <<< Responder  Received Main Mode 1st packet
Mar  5 08:25:21 2010    VPN  Log   (NATT)Initial Main Mode message received on MY_IP:500 but no connection has been authorized. Please check  your tunnel endpoint (gateway) setting
Mar  5 08:25:21 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Received Vendor ID payload Type = [Dead Peer Detection]
Mar  5 08:25:41 2010    VPN  Log   [Tunnel Negotiation Info] <<< Responder  Received Main Mode 1st packet
Mar  5 08:25:41 2010    VPN  Log   (NATT)Initial Main Mode message received on MY_IP :500 but no connection has been authorized. Please check  your tunnel endpoint (gateway) setting
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.



Many thanks

Oliver

http://tinymaillto.com/oliversl <-- my email after a captcha

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
oliversl1 Sat, 03/06/2010 - 06:40
User Badges:

The other side RV082 VPN Tunnel was not disabled, that was the cause :(