ECHO REPLY Attack?

[Philippe Cayphas]

Hello,

We have blocked on an Internet Firewall the following IP packet :

ECHOREPLY FROM host 1.2.3.4 TO DMZ net 5.6.7.0

We checked of course the logs and no echo request was sent and surely not
from the network adress (.0)!

My analysis is thus this is probably an attack but what could they be trying?

Philippe


__
Ph. Cayphas

Sr Engineer
AOF Belgium

+32 75 64 88 31
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]