Do you have a router that you can block all communications to and from a
certain IP?
Most routers do.
andre
-----Original Message-----
From: Dirk Boenning [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 01, 2000 9:20 AM
To: 'Firewall-1 Mailing list'
Subject: [FW1] Urgent. I'm under attack
Hello,
till a couple of minutes I'm under an attack. I never have seen this
behaviour.
I have round 'bout 50000 active connections. The Destination for all
of these connections is irc.arnes.si (193.2.1.34). The Source is an
internal IP. The internal IP is not one specific IP it's changing all
over
the whole subnet, even if no machine is assigned to this IP. But not
even the
IP's cycle through all values the ports do also.
I'm sure that IP spoofing is correct configured. The all over system
works
since 2 years.
Any idea how to stop, what to change ??
Tia, Dirk.
BTW. It's Firewall 4.0 under Solaris 2.6
--
______________________________________________________________
| _|_|_| _|_| _|_|_| _|_|_| _|_|_| _| _| |
| _| _| _| _| _| _| _| _| _|_| _|_| |
| _| _|_|_|_| _|_|_| _| _| _| _| _| _| |
| _| _| _| _| _| _| _| _| _| |
| _|_|_| _| _| _| _|_|_| _|_|_| _| _| |
|______________________________________________________________|
| CAPCom Technologie Beratung | Dirk Boenning |
| Entwicklung und Vertrieb GmbH | Tel.: +49 (0)6151/155-900 |
| Rundeturmstrasse 6 | Fax.: +49 (0)6151/155-909 |
| 64283 Darmstadt / Germany | E-Mail: [EMAIL PROTECTED] |
|______________________________________________________________|
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
