Re: Have firewall/internal network, but still receiving probes from AOL user -- how?

From: Anonymous User (googleTrashBin_at_yahoo.com)
Date: 12/07/03 

Date: 7 Dec 2003 12:06:41 -0800

I guess my main question was, HOW do their packets get through
my firewall in the first place? If they don't know my internal
IP, are they just scanning typical internal IP addresses, and they
happen to come through the wire to my firewall/router, which
thinks they're aimed at me?

Or are they using some sort of tunnelling?

And what can be done to avoid these kinds of techniques?

Relevant Pages

  • Re: iptables and dhcp
    ... > the same physical network segment as the firewall and the remote DHCP ... You used INPUT and not FORWARD chain ... # This target allows packets to be marked in the mangle table ...
    (comp.os.linux.networking)
  • Re: Trouble accessing Outlook Web Access from behind firewall
    ... When starting the firewall I also set ... > rejected and dropped packets are logged, however I see nothing in my log ... > # Higher ports needed to accept incoming/outgoing calls ...
    (comp.security.firewalls)
  • Re: Visnetic and 8signs firewall LOOPHOLE Read....
    ... I said I am just reporting bug in your Firewall, ... From the Port Scan/Properties control screen: ... The firewall filtered 100% of the packets that were received. ... operating system (I'm talking Windows, ...
    (comp.security.firewalls)
  • Re: strange network traffic
    ... Maybe not so wise to not have a firewall and trust a third party lurker to ... Subject: strange network traffic ... > -> connection established, following packets have neither SYN nor ...
    (Security-Basics)
  • Re: port 80 is open
    ... The firewall drops all packets initiated ... > internet the ISP router does not send the unreachable message. ... and then close the connection as your IP is seen as not connected. ...
    (comp.security.firewalls)