From owner-freebsd-security Sat Mar 11 10:27: 0 2000 Delivered-To: freebsd-security@freebsd.org Received: from mail.numachi.com (numachi.numachi.com [198.175.254.2]) by hub.freebsd.org (Postfix) with SMTP id C277937BC02 for ; Sat, 11 Mar 2000 10:26:56 -0800 (PST) (envelope-from reichert@numachi.com) Received: (qmail 15246 invoked by uid 1001); 11 Mar 2000 17:18:37 -0000 Date: Sat, 11 Mar 2000 12:18:37 -0500 From: Brian Reichert To: Harold Gutch Cc: Andy Farkas , freebsd-security@FreeBSD.ORG Subject: Re: security check output Message-ID: <20000311121836.A15122@numachi.com> References: <200003101459.BAA03095@zippyii.af.speednet.com.au> <20000311044658.A10149@foobar.franken.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre4i In-Reply-To: <20000311044658.A10149@foobar.franken.de>; from logix@foobar.franken.de on Sat, Mar 11, 2000 at 04:46:58AM +0100 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sat, Mar 11, 2000 at 04:46:58AM +0100, Harold Gutch wrote: > On Sat, Mar 11, 2000 at 02:18:13PM +1100, Andy Farkas wrote: > > > > This may belong on -questions... > > > > How is it possible that I get connection attempts from outside my private > > subnet? My main concern is how the heck do these packets get routed to my > > workstation? I'm sure there are routers in between that drop RFC1918 > > addresses.. > > > > > > Connection attempt to TCP 172.22.2.9:1503 from 216.35.209.171:80 > > > > Connection attempt to TCP 172.22.2.9:1503 from 216.35.209.171:80 > [...] Wasn't there some issue with a class of HP printers having hijacked an IP block? I need to find a URL, gimme a few minutes... -- Brian 'you Bastard' Reichert reichert@numachi.com 37 Crystal Ave. #303 Daytime number: (781) 899-7484 x704 Derry NH 03038-1713 USA Intel architecture: the left-hand path To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message