Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Jan 2000 09:39:05 -0500 (EST)
From:      Steve Hovey <shovey@buffnet.net>
To:        Brian Gallucci <briang@expnet.net>
Cc:        FreeBSD <freebsd-questions@FreeBSD.ORG>, ipfw@FreeBSD.ORG
Subject:   Re: Hmmm
Message-ID:  <Pine.BSF.4.05.10001140938290.15599-100000@buffnet11.buffnet.net>
In-Reply-To: <000701bf5e58$9f207260$095aaed8@expnet.net>

next in thread | previous in thread | raw e-mail | index | archive | help

To guess I would say it was a smurf type jobby - where the from IP is
altered so that the to IP responds to that machine and not he true machine
of origin.

On Thu, 13 Jan 2000, Brian Gallucci wrote:

> This is really weird ->
> 
> ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0
> ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0
> ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0
> ipfw: 1800 Deny UDP 216.174.91.28:137 216.174.91.31:137 in via xl0
> ipfw: 1800 Deny UDP 216.174.91.28:138 216.174.91.31:138 in via xl0
> 
> We don't own any address space on 216.174.91.0 at all !!
> 
> Can someone tell what this means ??? Am I missing something..
> 
> I think it should look something like - >
> 
> ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0
> ipfw: 1800 Deny UDP " OUR ADDRESS ":138 216.174.91.31:138 in via xl0
> 
> Thanks
> -Brian
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.10001140938290.15599-100000>