I am seeing alot of the messages below. Is this any thing special I need to watch out for? These seemed to start recently and just want to see if this is something new or ???
I like to know what I am up against when I see increases in certain traffic and googling this(I may not know what to look for in this case) is not giving me a concrete answer as to what this is about. I am also seeing various source ip addresses. The ones I have checked have reverse lookups indicating DSL service. This is from a Soekris net4801 running pfSense 1.2.3rc1. Thanks, Lyle Giese LCR Computer Services, Inc. Jun 8 00:38:32 FW2 pf: 000410 rule 104/0(match): block in on ng0: (tos 0x0, ttl 47, id 53817, offset 0, flags [none], proto UDP (17), length 122) 99.180.11.164.61891 > <public ip>.19295: UDP, length 94 Jun 8 00:38:33 FW2 pf: 483218 rule 104/0(match): block in on ng0: (tos 0x0, ttl 47, id 26629, offset 0, flags [none], proto UDP (17), length 122) 99.180.11.164.61891 > <public ip>.19296: UDP, length 94 Jun 8 00:38:33 FW2 pf: 000821 rule 104/0(match): block in on ng0: (tos 0x0, ttl 47, id 5213, offset 0, flags [none], proto UDP (17), length 122) 99.180.11.164.61891 > 2<public ip>.19295: UDP, length 94 Jun 8 00:38:33 FW2 pf: 507076 rule 104/0(match): block in on ng0: (tos 0x0, ttl 47, id 39985, offset 0, flags [none], proto UDP (17), length 122) 99.180.11.164.61891 > <public ip>.19296: UDP, length 94 Jun 8 00:38:33 FW2 pf: 000403 rule 104/0(match): block in on ng0: (tos 0x0, ttl 47, id 53069, offset 0, flags [none], proto UDP (17), length 122) 99.180.11.164.61891 > <public ip>.19295: UDP, length 94 --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
