January 20th, 2004, 06:20 PM
January 20th, 2004, 05:36 PM
That would hamper relations.
I thought you said your firewall was blocking all attempts? Are they making it through to your DMZ??
January 20th, 2004, 05:24 PM
Can you determine if this is probing or more of a DOS attack, where the attacker tries to open up tons of dud connections, or get the server stuck in a localhost-loop? With a spoofed ip connection...
January 20th, 2004, 05:07 PM
That's a start, BTW what firewall are you using if you don't mind telling?
January 20th, 2004, 04:59 PM
At this point is a local user still a suspect? If they are it would be easy to put a sniffer on the local network and search for probes of this type.
January 20th, 2004, 04:50 PM
Is this a multi-user network your administering or a home setup.