From owner-freebsd-isp Sun Mar 7 17:27:12 1999 Delivered-To: freebsd-isp@freebsd.org Received: from dns1.briang.org (c879583-a.ptbrg1.sfba.home.com [24.1.122.24]) by hub.freebsd.org (Postfix) with ESMTP id 4475714D39; Sun, 7 Mar 1999 17:27:10 -0800 (PST) (envelope-from brian@briang.org) Received: from brian-desktop (brian-desktop.briang.org [192.168.0.42]) by dns1.briang.org (8.9.1/8.9.1) with SMTP id SAA01490; Sun, 7 Mar 1999 18:35:37 -0800 (PST) Message-ID: <000401be6902$d5f66b60$2a00a8c0@brian-desktop.briang.org> Reply-To: "Brian Gallucci" From: "Brian Gallucci" To: "FreeBSD" Cc: Subject: Firewall Date: Sun, 7 Mar 1999 17:27:31 -0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3155.0 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I have noticed something very odd on my DNS server and was hoping someone could thell me what this means.. ipfw: 6300 Deny TCP 168.160.224.88:0 24.MY.IP.xxx:143 in via fxp0 ipfw: 65534 Deny ICMP:4.0 192.168.15.2 192.168.0.42 in via fxp0 My box has two nics with NATD running.. fxp0 = 24.MY.IP.xxx 255.255.255.0 fxp1 = 192.168.0.1 255.255.255.0 How did 192.168.15.2 get in ? This is private address space and my ISP does not have a route for anything on 192.168.0.0/16 so I'm try to figure out how they got to me and how they got in ? Next is there some kind of hole that has surfaced on port 143 ? I keep getting alot of connections on port 143.. I have the port blocked just wondering.. Thanks -Brian To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message