Date: Tue, 1 Jan 2002 12:22:08 -0500 From: "Joe & Fhe Barbish" <barbish@a1poweruser.com> To: "FBSD Questions" <questions@FreeBSD.ORG> Subject: IPFW UDP port# 520 Message-ID: <LPBBIGIAAKKEOEJOLEGOGEPBCKAA.barbish@a1poweruser.com>
next in thread | raw e-mail | index | archive | help
Happy new year to all FBSD list readers. I see in my security log a lot of denied packets over and over again of the same kind. Deny UDP 208.203.25.3:520 63.163.61.14:520 in via tun0 208.203.25.3 is my ISP's IP address and 63.163.61.14 is my IP address. When I lookup what port 520 is it says a local routing process or Trojan Ripper. I think it's my ISP's front door router inquiring if I am still there. Since my firewall is denying the request it just keeps repeating. How can I be sure It's my ISP's router and not the Ripper Trojan? What rules do I need the add to my IPFW rules set to resolve this? Thanks Joe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?LPBBIGIAAKKEOEJOLEGOGEPBCKAA.barbish>