Denied Packets from Internal Network

From: Randy C (randy_mn@hotmail.com)
Date: 04/08/02 

From: "Randy C" <randy_mn@hotmail.com>
Date: Mon, 08 Apr 2002 14:25:13 GMT

I have a Caldera install on my network server. I am using a proxy server
with an ipchains type firewall. I recently noticed entries in my log file
that indicate my server's internal IP is trying to send out packets about
every one second and the port number increases by 3 each time. Is this the
result of someone from the outside trying to route packets through my
internal network and to make it look like they are coming from my system?

The log entry looks like

Apr 8 time machine_name kernel: Packet log: input DENY eth1 PROTO=17
192.168.1.1:1499 L=44 S=0x00 I=31239 F=0x000 T=128 (#24)

This repeats itself with the port changing from 1499 to 1502 to 1505 etc ..
with the only other thing changing is the I= value .

comments? suggestions? education? 

--

Randy

Relevant Pages

  • Re: Denied Packets from Internal Network
    ... >I have a Caldera install on my network server. ... >result of someone from the outside trying to route packets through my ... >internal network and to make it look like they are coming from my system? ... your IP but please don't delete destination port. ...
    (comp.os.linux.security)
  • Re: Denied Packets from Internal Network
    ... > I have a Caldera install on my network server. ... I recently noticed entries in my log file ... > that indicate my server's internal IP is trying to send out packets about ... > internal network and to make it look like they are coming from my system? ...
    (comp.os.linux.security)