Re: tcp 22 > tcp 22

From: Nikolaj I. Potanin (nikolaj_at_drweb.ru)
Date: 07/02/03

  • Next message: FreeBSD bugmaster: "Current problem reports assigned to you" 
    Date: Wed, 2 Jul 2003 11:19:23 +0400
To: freebsd-security@freebsd.org

    > Jul 1 13:34:35 fbsd /kernel: ipfw: 1400 Accept TCP xxxxxx:22 yyyyy:22 in via
    > ed1
    > where xxxxxx is the attacker's IP and yyyyy is my box.
    > Also, as you can see, the connection is made from port 22 to port 22, which is
    > odd.

    http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=22441 -
    maybe this could explain your case? 

    -- 
Nikolaj I. Potanin, SA                          http://www.drweb.ru
ID Anti-Virus Lab (SalD Ltd)                    nikolaj@drweb.ru
St. Petersburg, Russia                          ph.: +7-812-3888624
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: FreeBSD bugmaster: "Current problem reports assigned to you"