I might be way off here but that packet might be originally requested
by the XBox which is why it was able to get to the XBox, (unless you
forwarded things to the XBoxes IP.)  IPCop should provide NO
information to getting to your internal network unless you allow it...
of course you IPCop box being compremised is still a possibility.  As
long as you have the patches for 1.3.0 you should be okay for now. 
However if you have some time to kill you should probably install
1.4.0 since there have been many improvments done since 1.3.0.

I'm also running 1.3.0 with all the updates in place and things are
working great... when I get time I'll be upgrading to 1.4.0 also.

On Fri, 08 Oct 2004 15:22:09 -0600, Rob S <[EMAIL PROTECTED]> wrote:
> Hello everyone,
> 
> I was looking over the logs for my ipcop box, and noticed that snort
> recorded an icmp packet transmission (and its source ip) that was
> attempting to get to my room mate's Xp box, probably just a ping. What
> i'm wondering about though, is that the ip of the icmp packet wasn't
> recorded under the 'firewall hits' log. Does this mean the packet got
> through? I'm using v1.3.0, should i just update to the new version and
> not worry?
> 
> -Rob.
> 
> _______________________________________________
> clug-talk mailing list
> [EMAIL PROTECTED]
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
> **Please remove these lines when replying
>

_______________________________________________
clug-talk mailing list
[EMAIL PROTECTED]
http://clug.ca/mailman/listinfo/clug-talk_clug.ca
Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
**Please remove these lines when replying

Reply via email to