From owner-freebsd-ipfw Fri Jan 14 6:39:13 2000 Delivered-To: freebsd-ipfw@freebsd.org Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13]) by hub.freebsd.org (Postfix) with ESMTP id 4320814CE1; Fri, 14 Jan 2000 06:39:09 -0800 (PST) (envelope-from shovey@buffnet.net) Received: from buffnet11.buffnet.net (buffnet11.buffnet.net [205.246.19.55]) by buffnet4.buffnet.net (8.9.3/8.8.7) with ESMTP id JAA36198; Fri, 14 Jan 2000 09:39:11 -0500 (EST) (envelope-from shovey@buffnet.net) Date: Fri, 14 Jan 2000 09:39:05 -0500 (EST) From: Steve Hovey To: Brian Gallucci Cc: FreeBSD , ipfw@FreeBSD.ORG Subject: Re: Hmmm In-Reply-To: <000701bf5e58$9f207260$095aaed8@expnet.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG To guess I would say it was a smurf type jobby - where the from IP is altered so that the to IP responds to that machine and not he true machine of origin. On Thu, 13 Jan 2000, Brian Gallucci wrote: > This is really weird -> > > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0 > ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0 > > We don't own any address space on 216.174.91.0 at all !! > > Can someone tell what this means ??? Am I missing something.. > > I think it should look something like - > > > ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0 > ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0 > > Thanks > -Brian > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message