Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 24 Jun 2001 23:58:08 -0700
From:      "Kris Anderson" <ohshutup@zdnetmail.com>
To:        "Karsten W. Rohrbach" <karsten@rohrbach.de>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: IPF rule response [should be IPFW rule response instead]
Message-ID:  <20010625065808.HDO26282.mta04.onebox.com@onebox.com>

next in thread | raw e-mail | index | archive | help

Oops, you are right. I am. doh...

But none the less what is the 195. network trying to do with my system?
 I didn't initiate any requests from/to that system.

Kris Anderson(ohshutup@zdnetmail.com)@2001.06.22 15:03:12 +0000:
> Howdy folks,
> 
> I've got a rule in my ipf that is reporting the following to syslog
> 
> <private_if>: <2>Jun 22 14:51:34 /kernel: ipfw: 3 Deny TCP 195.224.212.72:21
> <public_if>:21 in via rl0
> 
> I have limited understanding but it looks like that some bonehead on
> the 195. network is doing some sort of goofy ftp thing to my public_if,
> almost as if it was ftp relaying.
> 
> Could somebody unconfuse me as to what this means?
>
>it seems that you are mixing up ipf (ipfilter) and ipfw in the first
>place. a properly configured ipfilter with ftp in-core proxy for >keeping
state on the sessions would solve it i think.
>
/k

-- 
> "In Christianity neither morality nor religion come into contact with
> reality at any point." --Friedrich Nietzsche
KR433/KR11-RIPE -- WebMonster Community Founder -- nGENn GmbH SeniorTechie
http://www.webmonster.de/ -- ftp://ftp.webmonster.de/ -- http://www.ngenn.net/
karsten&rohrbach.de -- alpha&ngenn.net -- alpha&scene.org -- catch@spam.de
GnuPG 0x2964BF46 2001-03-15 42F9 9FFF 50D4 2F38 DBEE  DF22 3340 4F4E2964
BF46
Please do not remove my address from To: and Cc: fields in mailing lists.10x



___________________________________________________________________
To get your own FREE ZDNet Onebox - FREE voicemail, email, and fax,
all in one place - sign up today at http://www.zdnetonebox.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010625065808.HDO26282.mta04.onebox.com>