On Tuesday 24 October 2006 15:22, Davide Libenzi wrote: > On Tue, 24 Oct 2006, CLEMENT Francis wrote: > > Hello > > > > This post is not directly xmail or glst related, but I don't know where > > to post at this time for informations. > > > > Trying to use the content of glst-lame.dbm to generate some local > > blacklist, i noticed that some entries indicate 192.168 private network ! > > > > As my internal network don't use this class B, I don't understand ! > > > > Does it means my server was under ip spoofing attacks ? > > > > Does this mean that some weak routers on internet route rfc 1918 subnets > > to me ? > > In theory yes, but the closer the spoofer is to you, the lesser routers > will have to go through.
When I first started managing my own internet access, I had rules in my firewall to drop any private IPs coming from the outside. I went years without a single hit on those rules. I eventually decided it wasn't worth the CPU cycles to check every new connection for impossible packets and deleted those rules. Maybe I should reconsider... Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
