|
-
June 11th, 2003, 12:14 AM
#1
Member
A few more SUSPICIOUS entries!!
Now that I have turned off the logging of all dropped TCP/UDP/ICMP events on my real firewall.
I turned on some others...and now this is what I see:
06/10/2003 16:10:10.704 Denied UDP packet from LAN 192.168.168.155, 1107, LAN 192.168.168.1, 1900, LAN
06/10/2003 16:08:55.704 Denied UDP packet from LAN 192.168.168.155, 1107, LAN 192.168.168.1, 1900, LAN
06/10/2003 16:07:40.688 Denied UDP packet from LAN 192.168.168.155, 1107, LAN 192.168.168.1, 1900, LAN
[glowpurple]06/10/2003 16:06:52.800 VPN TCP SYN 192.168.168.135, 35584 10.0.0.162, 53513 [/glowpurple]
06/10/2003 16:06:25.672 Denied UDP packet from LAN 192.168.168.155, 1107, LAN 192.168.168.1, 1900, LAN
06/10/2003 16:05:10.656 Denied UDP packet from LAN 192.168.168.155, 1107, LAN 192.168.168.1, 1900, LAN
06/10/2003 16:03:55.640 Denied UDP packet from LAN 192.168.168.155, 1107, LAN 192.168.168.1, 1900, LAN
two (2) questions:
What is with the denied UDP from within my LAN?
What is up with that VPN entry?
and now my follow-up question:
Should I be concerned?
Humbly,
refarcratS
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|