Date: Fri, 22 Jun 2001 15:19:13 -0700 (PDT) From: Mark Hartley <mark@work.drapple.com> To: Kris Anderson <ohshutup@zdnetmail.com> Cc: freebsd-security@FreeBSD.ORG Subject: RE: IPF rule response Message-ID: <XFMail.010622151913.mark@work.drapple.com> In-Reply-To: <20010622220312.PZQH9852.mta11.onebox.com@onebox.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 22-Jun-01 Kris Anderson wrote: > Howdy folks, > > I've got a rule in my ipf that is reporting the following to syslog > > <private_if>: <2>Jun 22 14:51:34 /kernel: ipfw: 3 Deny TCP 195.224.212.72:21 > <public_if>:21 in via rl0 > > I have limited understanding but it looks like that some bonehead on > the 195. network is doing some sort of goofy ftp thing to my public_if, > almost as if it was ftp relaying. > > Could somebody unconfuse me as to what this means? > > Thanks. > I get that frequently. My take on it is that it is someone trying to bypass a firewall rule that allows anything from port 21, which some people's firewalls are set to do (since ftp is such a pain to firewall) Mark. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.010622151913.mark>