Entries in Firewall Log

2012-01-22 Thread Edward Treen
Hi All,

I'm hoping that there is a lister with good knowledge of the technicalities of 
the internet.

In my logs, there are many entries along the lines of:-

Jan 22 22:01:16 tedsnewmacpro Firewall[99]: Stealth Mode connection attempt to 
TCP 192.168.1.67:56039 from 76.74.254.118:80

and

Jan 22 19:28:49 tedsnewmacpro Firewall[99]: Deny netbiosd data in from 
172.16.162.1:137 to port 137 proto=17


The second is, I presume, some internal matter between the Mac system and the 
ADSL router, but the first worries me a little.

I've checked many of the IP addresses on whois.domaintools.com, and discovered 
Amazon, eBay  Adobe (amongst others).

Amazon I know offers server services to other organisations, but why should 
ebay, Adobe or in fact anyone try a Stealth Mode connection to my router?

Do I have cause for concern?

Thanks

Ted
(Probably getting paranoid)

-- 
You received this message because you are a member of G-Group, a group for 
those using G3, G4, and G5 desktop Macs - with a particular focus on Power Macs.
The list FAQ is at http://lowendmac.com/lists/g-list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to g3-5-list@googlegroups.com
For more options, visit this group at http://groups.google.com/group/g3-5-list


Re: Entries in Firewall Log

2012-01-22 Thread faithie999
the ip address 76.74.254.118 belongs to wordpress.com, which looks
like a blog hosting site.  do you have a blog there, or were you
reading a blog from there?



On Jan 22, 5:19 pm, Edward Treen ted.tr...@btinternet.com wrote:
 Hi All,

 I'm hoping that there is a lister with good knowledge of the technicalities 
 of the internet.

 In my logs, there are many entries along the lines of:-

 Jan 22 22:01:16 tedsnewmacpro Firewall[99]: Stealth Mode connection attempt 
 to TCP 192.168.1.67:56039 from 76.74.254.118:80

 and

 Jan 22 19:28:49 tedsnewmacpro Firewall[99]: Deny netbiosd data in from 
 172.16.162.1:137 to port 137 proto=17

 The second is, I presume, some internal matter between the Mac system and the 
 ADSL router, but the first worries me a little.

 I've checked many of the IP addresses on whois.domaintools.com, and 
 discovered Amazon, eBay  Adobe (amongst others).

 Amazon I know offers server services to other organisations, but why should 
 ebay, Adobe or in fact anyone try a Stealth Mode connection to my router?

 Do I have cause for concern?

 Thanks

 Ted
 (Probably getting paranoid)

-- 
You received this message because you are a member of G-Group, a group for 
those using G3, G4, and G5 desktop Macs - with a particular focus on Power Macs.
The list FAQ is at http://lowendmac.com/lists/g-list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to g3-5-list@googlegroups.com
For more options, visit this group at http://groups.google.com/group/g3-5-list


Re: Entries in Firewall Log

2012-01-22 Thread Bruce Johnson

On Jan 22, 2012, at 3:19 PM, Edward Treen wrote:

 Hi All,
 
 I'm hoping that there is a lister with good knowledge of the technicalities 
 of the internet.
 
 In my logs, there are many entries along the lines of:-
 
 Jan 22 22:01:16 tedsnewmacpro Firewall[99]: Stealth Mode connection attempt 
 to TCP 192.168.1.67:56039 from 76.74.254.118:80
 

Stealth mode means that the system is not responding to the HTTP connection 
from that host.  possibly because either the connection's been dropped or it's 
something on the other end trying to poke you.

Here's a quick checklist to see if your mac is vulnerable to outside attack:

1) Do you have any sharing services turned on in the sharing panel, or any 
services installed and available through other means (like bitorrent clients, 
database servers like mysql and the like)? if No, you're not vulnerable. If 
yes, continue.

2a) Does your Mac have an externally accessible IP address? (something other 
than 0.n.n.n, 192.168.n.n or 172.16.n.n-172.31.n.n) If Yes, you're possibly 
vulnerable for running services. Make sure that you keep OS X up-to-date, and 
limit the sharing options in the various advanced sections of the shared 
services (like remote login, etc) If NO see 2b.

2b) Do you have the ports used by these services forwarded by NAT on your 
router? If Yes, you're possibly vulnerable for running services. Make sure that 
you keep OS X up-to-date, and limit the sharing options in the various advanced 
sections of the shared services (like remote login, etc) for the forwarded 
services. (ie: if you're forwarding port 80, http access, to run a web server, 
but not port 22 for ssh, remote login will not work at all from outside your 
router, because it doesn't know where to send packets destined for port 22.)

If No, then you're safe. 

The firewall log lets you know every time a firewall rule denies a connection; 
you'll see a lot of them (a LOT of them if your IP address is an externally 
accessible one)

None of this will affect connections YOU make outside of your LAN, but if you 
answered no to all three questions, you're essentially invisible to the outside 
world.

-- 
Bruce Johnson

Wherever you go, there you are B. Banzai,  PhD

-- 
You received this message because you are a member of G-Group, a group for 
those using G3, G4, and G5 desktop Macs - with a particular focus on Power Macs.
The list FAQ is at http://lowendmac.com/lists/g-list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to g3-5-list@googlegroups.com
For more options, visit this group at http://groups.google.com/group/g3-5-list


Re: Best MacOS x on a G3 BW?

2012-01-22 Thread a1
Speaking of Panther, wasn't there a software download that enabled
right-clicking on an Apple mouse---by holding down the click a little
longer?

On Jan 21, 8:44 am, Mac User #330250 macuser330...@gmx.net wrote:
 --  Original message  --
 Subject: Best MacOS x on a G3 BW?
 Date:    Wednesday, 11. January 2012
 From:    seeker jesselorenstj...@gmail.com
 To:      G-Group g3-5-list@googlegroups.com

  what if any would be the ideal version of macOS x to
  install on g3 bw with maxed ram?  i am a huge fan of opensource, but
  i have fallen head over heals for mac osx and would like to keep these
  machines as such  so any help?

 I’m running Mac OS X 10.4.11 Tiger. My BW has its original 350 MHz G3
 processor, and I maxed out the memery 4×215 MB PC100 DIMMs to 1 GB. Sady I do
 rely on 10.4 because of internet functionality: I use TenFourFox. I also have
 a Cube G4 with 450 MHz running Tiger.

 BTW TenFourFox on a G3 with some fancy must-have extensions (like NoScript and
 AdBlock Plus) also put the speed brake on it. You just feel that it is too
 much for this old little bugger!

 My experience: the bottleneck is the 350 MHz processor. But even with a faster
 one it wouldn’t be the same experience as it is on, say, a G4 Dual 1GHz
 running Tiger or a G5 Dual-2 GHz with at least 2 GB memory running Leopard.
 The second problem that the BW has is the absence of an AGP bus. PCI just
 isn’t fast enough for Quartz Extreme. Under heavy I/O load (i.e. because I’m
 copying files on the USB bus -- USB 2.0 expansion card -- PCI bus -- CPU 
 --
 IDE channel) graphics becomes snatchy. Without Quartz Extreme (with the
 original ATi Rage 128 PCI graphics card) it will be snatchy anyhow.

 The best OS?
 I can see Mac OS 8.5.1 (the original bundled OS) rocking on it!

 Mac OS 8.6 or 9.x is maybe the best choice if you want to go for speed. Or a
 slim Linux/BSD distro. (But which one? Is there one for PowerPCs?)

 Mac OS X 10.3 might also be an option, but there is just soo much great
 software that requires at least 10.4 to run… 10.3 just makes you feel bad
 about your decision.
 10.2 will do as well, but I heard that 10.3 is even faster than 10.2 was.
 Also, 10.3 is the first to feature all that usability that you expect when
 going for Mac OS X. The backstep to 10.2 just feels like loosing something.
 Well, it did to me: I’ve tried.

 IF you don’t go for speed, 10.4 is propably good for you.

 Cheers,
 Andreas  aka  Mac User #330250

-- 
You received this message because you are a member of G-Group, a group for 
those using G3, G4, and G5 desktop Macs - with a particular focus on Power Macs.
The list FAQ is at http://lowendmac.com/lists/g-list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to g3-5-list@googlegroups.com
For more options, visit this group at http://groups.google.com/group/g3-5-list