During a 15 minute span this morning, my active log showed 40-50 connections from about 10 different source IPs (some of which I could resolve, some not) to my firewall, all using service 32778. One of the IP's had 20 concurrent connections.
Two questions: What is that service used for? It was listed as unassigned at IANA's site http://www.iana.org/assignments/port-numbers Why did my "Any -- firewall -- Any -- Drop" rule not catch this? I've added a rule just to block this mystery traffic until I get a handle on what it is. TIA for any help/opinions you may have to offer. Elisabeth =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ===============================================
