Printable View
Hi guys/girls,
I've been reading and learning about firewall today and I've found cool sites, really easy to understand.
Check out this sites :
http://www.robertgraham.com/pubs/firewall-seen.html
http://www.interhack.net/pubs/fwfaq/
I hope this sites help you when you set up your firewall.
Enjoy.
Annya
Hi guys/girls,
I've been reading and learning about firewall today and I've found cool sites, really easy to understand.
Check out this sites :
http://www.robertgraham.com/pubs/firewall-seen.html
http://www.interhack.net/pubs/fwfaq/
I hope this sites help you when you set up your firewall.
Enjoy.
Annya
I saw Robert Graham's site a long time ago - looks like he has done a nice site update which is easier to read and understand.
Good find/reminder - (will have another good read) :)
Cheers
PP
I saw Robert Graham's site a long time ago - looks like he has done a nice site update which is easier to read and understand.
Good find/reminder - (will have another good read) :)
Cheers
PP
Many thanks, Angel. I'm always looking to learn more or reinforce any knowledge I've managed to aquire. Good finds. :thumbsup:
Many thanks, Angel. I'm always looking to learn more or reinforce any knowledge I've managed to aquire. Good finds. :thumbsup:
Thanks angel those sites really helped me with my firewall.
Thanks again!!
Thanks angel those sites really helped me with my firewall.
Thanks again!!
First of all, nice post...lots of info on that site (Graham's), especially for a greenhorn like me.
I was looking at the info concerning ip addresses and how I could learn about entries in my firewall's log.
One thing (and this might be stupid, but I want to learn about it) I was wondering why in my log it says my firewall was blocking my computer from sending to an invalid ip address? (0.0.x.x) Just seems kind of strange to a newbie like me why my computer would be trying to send packets out to an invalid address.
BTW, I tried to search the forums for an answer and didn't find one--sorry if I'm treading familiar ground here.
First of all, nice post...lots of info on that site (Graham's), especially for a greenhorn like me.
I was looking at the info concerning ip addresses and how I could learn about entries in my firewall's log.
One thing (and this might be stupid, but I want to learn about it) I was wondering why in my log it says my firewall was blocking my computer from sending to an invalid ip address? (0.0.x.x) Just seems kind of strange to a newbie like me why my computer would be trying to send packets out to an invalid address.
BTW, I tried to search the forums for an answer and didn't find one--sorry if I'm treading familiar ground here.
It's because your computer doesn't have a valid IP address at the time these entries appeared in your firewall logs. I take it you're on dial-up or use PPPoE to connect to the internet. These entries are your computer obtaining an IP address, and I bet there's a nice conversation between your PC and your DHCP server on ports 67 and 68 going on. Have a look and see. :)
It's because your computer doesn't have a valid IP address at the time these entries appeared in your firewall logs. I take it you're on dial-up or use PPPoE to connect to the internet. These entries are your computer obtaining an IP address, and I bet there's a nice conversation between your PC and your DHCP server on ports 67 and 68 going on. Have a look and see. :)
Thanks for the reply. I can't seem to find any port information, as the information in my post was under the intrusion detection in NIS and from about 3 weeks ago. (the connections log doesn't go back that far)
I also don't know what a PPPoE is, (sorry) but I can tell you I'm on cable.
Could it be any apps I was running (P2P, IRC, etc.?)
I know this isn't really a big deal but like I said, I'm just trying to learn.
All replies are appreciated.
Thanks for the reply. I can't seem to find any port information, as the information in my post was under the intrusion detection in NIS and from about 3 weeks ago. (the connections log doesn't go back that far)
I also don't know what a PPPoE is, (sorry) but I can tell you I'm on cable.
Could it be any apps I was running (P2P, IRC, etc.?)
I know this isn't really a big deal but like I said, I'm just trying to learn.
All replies are appreciated.
Thanx a lot ... this information will help me out a lot... if you want you can send me any thing else that you think is helpful.
Chris
Thanx a lot ... this information will help me out a lot... if you want you can send me any thing else that you think is helpful.
Chris
PPPoE stands for Point to Point Protocol over Ethernet.
My guess would be that a program that acceses info from the net was trying during those times but wasn't able to. That would be my guess, but I'm not and expert on this stuff so if anybody else knows then correct me if I'm wrong.
PPPoE stands for Point to Point Protocol over Ethernet.
My guess would be that a program that acceses info from the net was trying during those times but wasn't able to. That would be my guess, but I'm not and expert on this stuff so if anybody else knows then correct me if I'm wrong.