Date: Fri, 14 Jan 2000 09:39:05 -0500 (EST) From: Steve Hovey <shovey@buffnet.net> To: Brian Gallucci <briang@expnet.net> Cc: FreeBSD <freebsd-questions@FreeBSD.ORG>, ipfw@FreeBSD.ORG Subject: Re: Hmmm Message-ID: <Pine.BSF.4.05.10001140938290.15599-100000@buffnet11.buffnet.net> In-Reply-To: <000701bf5e58$9f207260$095aaed8@expnet.net>
next in thread | previous in thread | raw e-mail | index | archive | help
To guess I would say it was a smurf type jobby - where the from IP is altered so that the to IP responds to that machine and not he true machine of origin. On Thu, 13 Jan 2000, Brian Gallucci wrote: > This is really weird -> > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > > We don't own any address space on 216.174.91.0 at all !! > > Can someone tell what this means ??? Am I missing something.. > > I think it should look something like - > > > ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0 > > Thanks > -Brian > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.10001140938290.15599-100000>