Date: Fri, 29 Jun 2001 18:04:02 +0300 From: Peter Pentchev <roam@orbitel.bg> To: George.Giles@mcmail.vanderbilt.edu Cc: freebsd-security@freebsd.org Subject: Re: What is ipfw telling me ? Message-ID: <20010629180402.B535@ringworld.oblivion.bg> In-Reply-To: <OFB8BDE232.323E44F5-ON86256A7A.005144B2@MC.VANDERBILT.EDU>; from George.Giles@mcmail.vanderbilt.edu on Fri, Jun 29, 2001 at 09:49:54AM -0500 References: <OFB8BDE232.323E44F5-ON86256A7A.005144B2@MC.VANDERBILT.EDU>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jun 29, 2001 at 09:49:54AM -0500, George.Giles@mcmail.vanderbilt.edu wrote: > What is ipfw telling me ? > > The 216 host is attempting to break in, but how is it using port 80 on the > other machine ? > > ipfw: 2400 Deny TCP 216.239.46.20:21602 10.0.0.1:80 in via xl0 The host 216.239.46.20 is trying to connect to 10.0.0.1; the connection attempt is from port 21602 (ephemeral, unique to this connection in a certain timeframe) to port 80 on 10.0.0.1. That is, someone from 216.239.46.20 is trying to browse the web on 10.0.0.1. G'luck, Peter -- This sentence claims to be an Epimenides paradox, but it is lying. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010629180402.B535>