From owner-freebsd-security Fri Jun 22 15: 3:17 2001 Delivered-To: freebsd-security@freebsd.org Received: from mta11.onebox.com (mta11.onebox.com [64.68.76.121]) by hub.freebsd.org (Postfix) with ESMTP id 33EE337B409 for ; Fri, 22 Jun 2001 15:03:13 -0700 (PDT) (envelope-from ohshutup@zdnetmail.com) Received: from onebox.com ([10.1.111.11]) by mta11.onebox.com (InterMail vM.4.01.03.21 201-229-121-121-20010307) with SMTP id <20010622220312.PZQH9852.mta11.onebox.com@onebox.com> for ; Fri, 22 Jun 2001 15:03:12 -0700 Received: from [24.176.48.110] by onebox.com with HTTP; Fri, 22 Jun 2001 15:03:12 -0700 Date: Fri, 22 Jun 2001 15:03:12 -0700 Subject: IPF rule response Reply-To: ohshutup@zdnetonebox.com From: "Kris Anderson" To: freebsd-security@FreeBSD.ORG Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit MIME-Version: 1.0 Message-Id: <20010622220312.PZQH9852.mta11.onebox.com@onebox.com> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Howdy folks, I've got a rule in my ipf that is reporting the following to syslog : <2>Jun 22 14:51:34 /kernel: ipfw: 3 Deny TCP 195.224.212.72:21 :21 in via rl0 I have limited understanding but it looks like that some bonehead on the 195. network is doing some sort of goofy ftp thing to my public_if, almost as if it was ftp relaying. Could somebody unconfuse me as to what this means? Thanks. Sincerely, Kris Anderson ___________________________________________________________________ To get your own FREE ZDNet Onebox - FREE voicemail, email, and fax, all in one place - sign up today at http://www.zdnetonebox.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message