Interesting ipfw response

From: Casey Dinsmore (cdinsmore@vatyx.com)
Date: 02/07/01 

From: "Casey Dinsmore" <cdinsmore@vatyx.com>
To: <freebsd-security@freebsd.org>
Date: Wed, 7 Feb 2001 11:38:15 -0800

I've had a couple interesting entries in my log lately and wonder if someone could shed some light on these. How is it that they are being rejected with rule number -1? If I am having a problem with a ipfw ruleset could someone offer recommendations to fix and prevent this?

Feb 4 14:25:22 axisintegrated /kernel: ipfw: -1 Refuse UDP 64.80.89.149:27015 1.1.1.1:1261 in via de0
Feb 4 14:25:22 axisintegrated /kernel: ipfw: -1 Refuse UDP 64.80.89.149:27015 1.1.1.1:1261 in via de0
Feb 6 09:24:31 axisintegrated /kernel: ipfw: -1 Refuse TCP 207.189.165.105:12336 1.1.1.1:22866 in via de0
Feb 6 09:24:31 axisintegrated /kernel: ipfw: -1 Refuse TCP 207.189.165.105:0 1.1.1.1:0 in via de0
Feb 6 09:24:38 axisintegrated /kernel: ipfw: -1 Refuse TCP 207.189.165.105:12336 1.1.1.1:22871 in via de0
Feb 6 09:24:42 axisintegrated /kernel: ipfw: -1 Refuse TCP 207.189.165.105:12336 1.1.1.1:23089 in via de0
Feb 6 09:24:42 axisintegrated /kernel: ipfw: -1 Refuse TCP 207.189.165.105:0 1.1.1.1:0 in via de0
Feb 6 17:04:44 axisintegrated /kernel: ipfw: -1 Refuse TCP 207.189.165.30:65533 1.1.1.1:256 in via de0
Feb 6 17:04:44 axisintegrated /kernel: ipfw: -1 Refuse TCP 207.189.165.30:65533 1.1.1.1:1023 in via de0
Feb 6 17:04:44 axisintegrated /kernel: ipfw: -1 Refuse TCP 207.189.165.30:0 1.1.1.1:0 in via de0

My ip was changed to 1.1.1.1 obviously and the scanner IP address was not changed to protect the guilty.

Thanks
Casey Dinsmore

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: Question on Motorcycle Schools
    ... names are mentioned to protect the guilty. ... Any resemblance to actual ... you were a typical public school teacher ..... ...
    (rec.motorcycles.tech)
  • Re: So, you want to be a Harley mechanic?
    ... No names are mentioned to protect ... the guilty. ... Any resemblance to actual people is definitely ... thinking a Physics degree, so I can get back to my former geekdom). ...
    (rec.motorcycles.harley)
  • Re: If Johnny Cochran Was Still Here...
    ... Doug Taylor wrote: ... Landis is obviously guilty, he has every right to challenge the ... testing and do what he is doing within the system to protect his ...
    (rec.bicycles.racing)
  • Re: Good VeloNews Letter
    ... If the test is valid and the sample came up positive then it has EPO in it. ... There is a difference between all evidence, ... We have rules about these things, not only to protect the ... Even a guilty man can be framed. ...
    (rec.bicycles.racing)
  • Re: UPDATE: Missing South Carolina/Hilton Head Couple
    ...  looked at every year to protect  against this happening? ...  With a scanner and a printer, ... are not a means of uncovering fraud. ... accounts have much lower balances than the doctored statements indicate).. ...
    (alt.true-crime)
Quantcast