Yep - it started right at the beginning and worked right up through the
subnet in seconds.
Sheesh - I guess it just caught me off guard. Glad to know my firewall
works, at least for a NetBus scan <s>.
Thanks to everyone who responded. This list is a great resource. I'm
obviously a newbie to the world of firewalls at the moment, but I hope to
gain enough knowledge in the future to be able to help out instead of simply
asking questions as I'm sure I will be in the near future.
Thanks again,
Evan
-----Original Message-----
From: Crumrine, Gary L [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 08, 1999 1:13 PM
To: Evan Brastow
Subject: RE: Yikes... was this an attack of some sort?
Congratulations...You have been scanned... You are no longer a virgin...
My guess it was a port scan starting on whatever IP you have registered with
the Internic right?
-----Original Message-----
From: Evan Brastow [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 08, 1999 8:22 AM
To: [EMAIL PROTECTED]
Subject: Yikes... was this an attack of some sort?
Looking at my firewall logs from last night, I noticed something I hadn't
seen before. An address (ri-1tnt105.efortress.com) essentially tried to get
through to my entire IP range (sequentially) - every computer on it. The
service was listed as 12345 and the port as 11111. Protocol was TCP. My
firewall dropped all of these packets, but nonetheless, that's scary. Was
this some kind of probe?
Thanks muchly,
Evan
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
