It is certainly impossible! cos this websense server is managed by myself!
Even I use websense server to surt internet, it should log it's NIC
ipaddress instead of loopback interface.  It might because of IP spoofing,
as etienne said. But could you give me some more informatio how to catch
him, etinne?



                                                                                       
                                              
                    [EMAIL PROTECTED] (Ralf Guenthner)                               
                                              
                    Sent by:                                    To:     
<[EMAIL PROTECTED]>                   
                    [EMAIL PROTECTED]        cc:                    
                                              
                    kpoint.com                                  Subject:     Re: [FW1] 
127.0.0.1                                     
                                                                                       
                                              
                                                                                       
                                              
                    11/09/2000 07:48 PM                                                
                                              
                    Please respond to "Ralf Guenthner"                                 
                                              
                                                                                       
                                              
                                                                                       
                                              




So much is clear: This is the address of the internal loopback interface,
hence of the Websense server itself. Either someone is surfing at the
Websense console or...But then I don't know much about Websense. Maybe
someone else can make sense of this behavior?

Cheers
Ralf G.


-----Urspr�ngliche Nachricht-----
Von: <[EMAIL PROTECTED]>
An: <[EMAIL PROTECTED]>
Gesendet: Donnerstag, 9. November 2000 09:48
Betreff: [FW1] 127.0.0.1


>
> Hi, all gurus:
>
> Could anybody tell me why there is someone be able to use 127.0.0.1 to
> access Internet? It appears in my Websense' log:
>
>
11/08/2000,20:02:19,"Prevented","127.0.0.1","204.246.215.22","piss.realgals.

com","HTTP","Sex
>
> 2",0,0,
> "-"
>
11/08/2000,20:02:23,"Prevented","192.168.7.67","208.50.145.144","www.webshot

s.com","HTTP","Entertain
> ment",0,0,"-"
>
11/08/2000,20:02:23,"Prevented","127.0.0.1","202.84.137.90","www.jobsdb.com"

,"HTTP","Job
>
> Search",0,0
> ,"-"
>
11/08/2000,20:02:26,"Prevented","127.0.0.1","203.179.49.161","www2.sega.co.j

p","HTTP","Web
>
> Chat",0,0
> ,"-"
>
11/08/2000,20:02:29,"Prevented","127.0.0.1","63.210.28.244","teen.adultfrees

pace.com","HTTP","Sex
>
> 2"
> ,0,0,"-"
>
> Is there any way to find out this real person?
>
> thanks,
> Jin
>
>
>
>
============================================================================

====
>      To unsubscribe from this mailing list, please see the instructions
at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================

====



================================================================================

     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================







================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to