Date: Wed, 2 Jul 2003 11:19:23 +0400 From: "Nikolaj I. Potanin" <nikolaj@drweb.ru> To: freebsd-security@freebsd.org Subject: Re: tcp 22 > tcp 22 Message-ID: <1881663278.20030702111923@drweb.ru> In-Reply-To: <200307011432.54750.tarmo@momentor.ee> References: <200307011432.54750.tarmo@momentor.ee>
next in thread | previous in thread | raw e-mail | index | archive | help
> Jul 1 13:34:35 fbsd /kernel: ipfw: 1400 Accept TCP xxxxxx:22 yyyyy:22 in via > ed1 > where xxxxxx is the attacker's IP and yyyyy is my box. > Also, as you can see, the connection is made from port 22 to port 22, which is > odd. http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22441 - maybe this could explain your case? -- Nikolaj I. Potanin, SA http://www.drweb.ru ID Anti-Virus Lab (SalD Ltd) nikolaj@drweb.ru St. Petersburg, Russia ph.: +7-812-3888624
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1881663278.20030702111923>