Search:

Good Luck! I was in the same position a year and a half ago. Make sure you have access to two boxes, one local with ip tables and one remote with nmap. The best thing you can do aside from...

The OUT chain only pertains to processes running on the box, ie a logged in user, an automated task via cron, etc. There are technically packets going OUT of the box all day long. Its got to start...

Perhaps originate was the wrong choice of words. I understand that the packet was sent from my router. Given the nature of statefull rules though, my router did not initiate communction therefore...

Thanks Ammo,

That link is great. It still is odd to me that it appeared to originate from my router. I have statefull rules in place and the packet originated from 67.xx.... Its confusing to me...

The box *is* my router. I am using an old Quantex that was upgraded to an AMD 450 something or other. This box is NATing 30+ computers. We were using a Linksys router provided by our ISP, but this...

Jul 26 03:57:45 XXXX: security_checkIN= OUT=eth0 SRC=192.168.XX.XX DST=67.XXX.102.167
/\ ...

Serial Numbers...Social Security Numbers...Registration Numbers
Who cares if you processor number is on...I just got a postcard in the mail from my high school telling me they are trying to keep up...

Thanks AngryBob,

Unfortunately this is not the only entry. Within the span of a few seconds, four lan computers appear in the log, and this is not an isolated incident. I get the creepy feeling...

Hello,

I have a redhat box protecting my network and I log my iptables rules. In particularly I log for outbount traffic. I see some entrys that would appear to be spoofs but I am uncertain of...