They are probably just scanning for openings, not really targeting you unless they find an opening.
Tony Iannotti
AVP: Dir. Net. Ops.
[EMAIL PROTECTED]
Phone: (973) 353-6400
Cell: (201) 538-4382
Fax: (973) 642-7919
"Thinking implies disagreement; and disagreement implies non-conformity;
and non-conformity implies heresy; and heresy implies disloyalty --
so obviously thinking must be stopped"
[Call to Greatness, 1954] -- Adlai Stephenson
"#!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)"
[export-a-crypto-system, 1994] -- Adam Back.
The #1 Way to Pay Online
http://www.checkfree.com/paybillsonline
| Martin byford <[EMAIL PROTECTED]>
Sent by: Mailing list for discussion of Firewall-1 <[EMAIL PROTECTED]> 12/15/2002 09:29 PM
|
To: [EMAIL PROTECTED] cc: Subject: [FW-1] why my firewall was contacted by http so often? |
Hi.. Group
I had set up a alert feature in my firewall in such way if external hosts
contact my firewall via telnet, ssh, ftp , http, https, smtp. It will send
alert to me and drop it. To my suprise that more than 80% alert are caused
by http. Do anyone know that why so many people contact us via http? Do you
know any attack can be initialled by HTTP? FYI, we didn't register our
firewall IP in the internet domain and it is not a web server.
Besides, I also found most of the traffic come from 61.X.X.X and our
firewall IP is also in 61.X.X.X network. But we are in different country.
Any idea?
_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
