Hi guys,

I installed snort on my computer a while ago, and today I decided to take a look in
the snort log-files.

I found this line:

15:13:02.147356 213.66.247.247 > 172.16.0.20: icmp: host 217.209.203.66 unreachable (DF)
15:13:05.371134 213.66.247.247 > 172.16.0.20: icmp: host 217.209.203.66 unreachable (DF)
15:13:11.957263 213.66.247.247 > 172.16.0.20: icmp: host 217.209.203.66 unreachable (DF)

I use NAT on my FW, my internal addresses are 172.16.0.0/24, 213.66.247.247 and
217.209.203.66 are the ones I am curious about.

Does this mean that someone is pinging/probing my computer spoofing the reply address, or something like that?