Never seen this before?

From: -lone_wolf- (-lone_wolf-@NO_SPAMexcite.com)
Date: 09/06/02


From: "-lone_wolf-" <-lone_wolf-@NO_SPAMexcite.com>
Date: Fri, 06 Sep 2002 18:07:36 GMT

Would someone be able to explain what this message was on my firewall
(in layman's terms?)

TIME: 09/06/2002 10:54:46
ACTION: Blocked
PROTOCOL: UDP
DIRECTION: Incoming
DESTINATION HOST: 24.76.248.XXX
DESTINATION PORT: 500
SOURCE IP: 24.76.169.XXX
SOURCE PORT: 500
APPLICATION INVOLVED: C:\WINDOWS\system32\lsass.exe
COUNT: 1
BEGIN TIME: 09/06/2002 10:54:11
END TIME: 09/06/2002 10:54:11
RULE NAME:
GUI%GUICONFIG#SRULE@APPCONFIG-TCP#C:\WINDOWS\System32\LSASS.EXE

Thanks in advance

John



Relevant Pages

  • SBS2K3 Prem Symantec Security Gaeway
    ... Type: UDP ... Destination Port: 500 ... Source Port: 49152-50151 (if Dynamic ISAKMP Source port is enabled in ... You must configure your ISA server to pass the following inbound protocol ...
    (microsoft.public.windows.server.sbs)
  • Re: Need Some help with Instrument Control toolbox
    ... No inherent sequence numbers, no inherent ACK or NAK, no inherent detection of lost data, no inherent protocol to follow to set up or close down a connection; if these are potential problems then you have to put them into the UDP packet yourself, re-inventing parts of TCP. ... The difficulty is that Matlab is not able to act as a TCP server -- which means that it is not able to respond when something else initiates a TCP/IP connection. ... Using the same source and destination port is not uncommon for simple interfaces, but such a configuration is not used if there need to be multiple systems talking to the same service: each distinct conversation needs to have its own source port. ...
    (comp.soft-sys.matlab)
  • iptables blocking DNS resolution, web browsing, ftp...etc.
    ... Accept If protocol is TCP and input interface is eth2 and destination port ...
    (alt.linux)
  • Re: blocking incoming udp packets
    ... It seems the router is sending udp packets to 255.255.255.255 (both ... and destination port 162. ... UDP 162 is the SNMP trap port. ... network device attempting to send traps to be logged by an SNMP ...
    (comp.security.firewalls)
  • Re: What to look at, source or destination port?
    ... UDP is not a connection-oriented protocol as TCP is, ... Anyway it's a good practice to allow to pass through the firewall only ... source or destination port? ...
    (Security-Basics)