This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Packet Filter Log

Hi,

Please excuse my ignorance with this question, I'm a developer not a network techie.

In the Packet Filter Log I'm constantly getting records such as: (IP addresses have been masked)

4 Default DROP TCP
123.43.430.226 : 60112
→
72.42.12.43 : 41006

[SYN] len=48 ttl=118 tos=0x00 srcmac=00:00:00:00:00:00 dstmac=00:24:45c8e:3a:23

I don't recognise either IP address. How can the source be an IP address outside the network? is this anything to be concerned about? (Apart from my obvious lack of knowledge:confused[:)].

Any advice would be much appriciated.

Many Thanks,
Ian.

This thread was automatically locked due to age.

0 BarryG over 15 years ago

Hi, if the destination is your firewall's external address, then it's probably people scanning you for open ports.

That's why it's good to have a firewall, and it's usually nothing to worry too much about.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 ianp10 over 15 years ago

Thanks for your response, I'll check this out.
Cancel
Vote Up 0 Vote Down

Cancel