You could try disconnecting that router and see who screams. :-) Thanks, John Aldrich IT Manager, Blueridge Carpet 706-276-2001, Ext. 2233
From: Raper, Jonathan - Eagle [mailto:jra...@eaglemds.com] Sent: Thursday, September 16, 2010 11:23 AM To: NT System Admin Issues Subject: security concern - ESX host repeatedly hitting external IP... Were getting ready to decommission an old router, and almost all of the traffic to and through it (except broadcast) has stopped. I'm reviewing the syslog, and keep seeing this: 9/16/2010 8:36:50 AM [Internal Router Private IP Address] Informational SEC-6-IPACCESSLOGP 651364: 44w0d: %SEC-6-IPACCESSLOGP: list permit_any permitted udp [ESX Private IP Address](0) -> 72.18.205.156(0), 1 packet I've asked our VMware admin to look over his host configuration to make sure he isnt pointing to the old router, but he says everything is "fine." Anyone else seen this or have any ideas as to why I'm seeing this traffic? Upon Googling said IP Address, it appears that it may be part of pool.ntp.org, but I cannot confirm this. This host is located in Warminster, PA, according to some sites. Jonathan L. Raper, A+, MCSA, MCSE Technology Coordinator Eagle Physicians & Associates, PA jra...@eaglemds.com www.eaglemds.com ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
