Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 7 Mar 1999 17:27:31 -0800
From:      "Brian Gallucci" <brian@briang.org>
To:        "FreeBSD" <freebsd-questions@freebsd.org>
Cc:        <freebsd-isp@freebsd.org>
Subject:   Firewall
Message-ID:  <000401be6902$d5f66b60$2a00a8c0@brian-desktop.briang.org>

next in thread | raw e-mail | index | archive | help
I have noticed something very odd on my DNS server and was hoping someone
could thell me what this means..

ipfw: 6300 Deny TCP 168.160.224.88:0 24.MY.IP.xxx:143 in via fxp0

ipfw: 65534 Deny ICMP:4.0 192.168.15.2 192.168.0.42 in via fxp0

My box has two nics with NATD running..

fxp0 = 24.MY.IP.xxx 255.255.255.0
fxp1 = 192.168.0.1 255.255.255.0

How did 192.168.15.2 get in ?

This is private address space and my ISP does not have a route for anything
on 192.168.0.0/16
so I'm try to figure out how they got to me and how they got in ?

Next is there some kind of hole that has surfaced on port 143 ?

I keep getting alot of connections on port 143..

I have the port blocked just wondering..

Thanks
-Brian



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000401be6902$d5f66b60$2a00a8c0>