Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Jul 2000 01:14:12 -0700 (PDT)
From:      John F Cuzzola <vdrifter@ocis.ocis.net>
To:        freebsd-security@FreeBSD.ORG
Subject:   Re: Firewall help
Message-ID:  <Pine.LNX.4.21.0007090106390.20243-100000@ocis.ocis.net>
In-Reply-To: <20000708015002.5601.qmail@web213.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help

Hi everyone, 
On a few occasions I get firewall log entries that look something like
this:
 
ipfw: 59000 Deny TCP 210.205.2.50:49088 255.255.255.255:80

My question is how does this happen? I mean I know 255.255.255.255 is the
network broadcast but how did I receive this entry? Does it mean the
source (210.205.2.50) scanned the entire class C network and the router
abbreviated the entry as destination 255.255.255.255 or is this a FreeBSD
logging abreviation for a range of ip's? (the entire network). Any
thoughts would be sincerely appreciated ...


(Ps: I'm using FreeBSD 4.0)




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.21.0007090106390.20243-100000>