From owner-freebsd-isp  Mon Mar  8  4:43:57 1999
Delivered-To: freebsd-isp@freebsd.org
Received: from titan.eclipse.co.uk (titan.eclipse.co.uk [195.188.32.18])
	by hub.freebsd.org (Postfix) with ESMTP
	id 2375514BEC; Mon,  8 Mar 1999 04:43:52 -0800 (PST)
	(envelope-from stuart@eclipse.net.uk)
Received: from eclipse.net.uk ([195.188.32.31]) by titan.eclipse.co.uk
          (Netscape Messaging Server 3.5)  with ESMTP id AAA24B5;
          Mon, 8 Mar 1999 12:43:33 +0000
Message-ID: <36E3C64E.33060E45@eclipse.net.uk>
Date: Mon, 08 Mar 1999 12:45:02 +0000
From: Stuart Henderson <stuart@eclipse.net.uk>
Organization: Eclipse Networking Ltd.
X-Mailer: Mozilla 4.5 [en] (WinNT; U)
X-Accept-Language: en-GB
MIME-Version: 1.0
To: Brian Gallucci <brian@briang.org>
Cc: FreeBSD <freebsd-questions@freebsd.org>, freebsd-isp@freebsd.org
Subject: Re: Firewall
References: <000401be6902$d5f66b60$2a00a8c0@brian-desktop.briang.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> How did 192.168.15.2 get in ?

Probably spoofed.

> I keep getting alot of connections on port 143..

IMAP. Some old IMAP daemons have well known security holes. See the CERT
advisories for details.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message