Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Dec 1999 17:57:58 +0200
From:      Giorgos Keramidas <charon@hades.hell.gr>
To:        Stan Brown <stanb@netcom.com>
Cc:        Free BSD Questions list <freebsd-questions@freebsd.org>
Subject:   Re: Strange ipfw rejects
Message-ID:  <19991222175758.C2656@hades.hell.gr>
In-Reply-To: <199912220224.SAA20988@netcom.com>
References:  <199912220224.SAA20988@netcom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Dec 21, 1999 at 09:24:36PM -0500, Stan Brown wrote:
| 	I just set up a new gateway machine with ipfw. I have not been using
| 	any rules before. In the first day, I got the following recjects:
| 
| 
| ipfw: 2000 Deny TCP 24.8.246.24:4114 24.6.61.166:1243 in via ed1
| ipfw: 2000 Deny TCP 24.8.246.24:4114 24.6.61.166:1243 in via ed1
| ipfw: 2000 Deny TCP 24.2.41.157:3338 24.6.61.166:1243 in via ed1
| ipfw: 2000 Deny TCP 24.2.41.157:3338 24.6.61.166:1243 in via ed1
| ipfw: 2000 Deny TCP 24.6.249.75:3989 24.6.61.166:12345 in via ed1
| ipfw: 2000 Deny TCP 24.6.249.75:3989 24.6.61.166:12345 in via ed1
| ipfw: 2000 Deny TCP 24.8.159.59:3930 24.6.61.166:1243 in via ed1
| 
| 	All of these IP's are user machines on my cablemodem providers network.
| 	Any clues as to what these ports are?

Oh, just a few NetBus and SubSeven probes.  Usually originating in a
dark room, where a teenager has discovered all by himself, the beauty
of networking with Windows machines.

Your ipfw rules have a rule entry in number 2000, that rejects this
packets, so don't worry about it.  However, doing an

	# ipfw list

and trying to understand what the rules are there for, is a nice thing
to do.  Go for it ;)

-- 
Giorgos Keramidas, <keramida@ceid.upatras.gr>
"What we have to learn to do, we learn by doing." [Aristotle]


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991222175758.C2656>