See my original message below and then look at the abuse teams response.
They did take a month or so to answer this letter.
Does this make sense to you all? This suggests that the router here is
attempting to provide DHCP services to anyone on this network. The router's
ip is nothing like the ip of my local @HOME network.
They say it is my modem's default gateway but that is not what I have my
machine configured for.
I am blocking these packets but my cable modem works fine.
My Static ip: 24.182.146.18 Bcast:24.182.146.127 Mask:255.255.255.128
My Gateway ip: 24.182.146.1
Any insight appreciated.
Joel
Original Message Follows:
-------------------------
For months, I have had this sort of entry in my firewall log:
Jul 8 11:56:19 cc846558-a kernel: Packet log: input DENY eth1 PROTO=17
10.91.193.1:67 255.255.255.255:68 L=576 S=0x00 I=58791 F=0x0000 T=255
(#2)
These occur several times per minute. It would seem someone is trying to
hook up with a boot server. Is there some way you could notify the
parties
originating these requests and stop them ?
Thanks,
Joel Hammer
----- Forwarded message from AUP Enforcement Team <[EMAIL PROTECTED]> -----
Date: Wed, 01 Aug 2001 13:56:35 -0700
To: Joel Hammer <[EMAIL PROTECTED]>
Subject: Re: Annoying broadcast packets. Hack attempt?
From: AUP Enforcement Team <[EMAIL PROTECTED]>
Reply-To: AUP Enforcement Team <[EMAIL PROTECTED]>
X-Mailer: Kana 6.0
X-MIME-Autoconverted: from quoted-printable to 8bit by cc846558-a.twsn1.md.home.com id
QAA21128
Thank you for your report. This IP address is your modems default
gatway address and is a machine that is a part of your network routing.
This machine is secure and does not perform portscans, the traffic you
saw is part of standard network traffic. If your firewall software is
reporting this as a portscan, system probe, or hack attempt, you may
wish to check the settings of your firewall, as many have 'maximum'
settings which will report any and all network traffic, including
standard traffic such as this, as an attack.
Thank you,
The @Home Network Policy Management Team
----- End forwarded message -----
_______________________________________________
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc
->http://linux.nf/mailman/listinfo/linux-users
