Maybe someone has logged onto your router and is doing traceroute
from your router. Do you allow telnet from all pathways to your router?
Enno Rey wrote:
> Hi,
>
> > What I found in the logs was a series of connections rising from
> sourceport
> > 1024 and destination port 33434 to source port 1113 and destination port
> > 33523. These connections were from our router to our firewall.
>
> Those are exactly the UDP ports used by the Van Jacobsen-implementation of
> traceroute (=most common UNIX-implementation).
> Maybe somebody just tracerouted your FW. (But then I don't understand why
> the packets originated from the router...)
> Do you filter out UDP and ICMP traffic on your router?
>
> Enno Rey
>
> [EMAIL PROTECTED]
> PGP 192E 3EBC AD7D DA41 82FC 0C21 5013 0A2C 42B9 F190
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
