dear mike hoskins do you have za as firewall or what else do you have as a firewall? pls specify thanks ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, July 04, 2001 10:02 PM Subject: Firewalls digest, Vol 1 #67 - 1 msg > Send Firewalls mailing list submissions to > [EMAIL PROTECTED] > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.gnac.net/mailman/listinfo/firewalls > or, via email, send a message with subject or body 'help' to > [EMAIL PROTECTED] > > You can reach the person managing the list at > [EMAIL PROTECTED] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Firewalls digest..." > > > Today's Topics: > > 1. Re: Suspicious connection? (Mike Hoskins) > > --__--__-- > > Message: 1 > Date: Wed, 4 Jul 2001 11:08:48 -0700 (PDT) > From: Mike Hoskins <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: Re: Suspicious connection? > > > > I found logs of some incoming TCP packets with both source and > > destination ports as 53, on firewall. Actually, the packets are > > destined to our DNS server, but the fact that the source port is > > 53 as well, sounds strange; doesn't it? Is it any incident? > > Could be a remote server with 'query-srouce * port 53;' set. Do the > hosts the packets appear to originate from seem suspicious? > > Later, > -Mike > > -- > Eat drink and be merry, for tomorrow they may make it illegal. > > > > --__--__-- > > _______________________________________________ > Firewalls mailing list > [EMAIL PROTECTED] > http://lists.gnac.net/mailman/listinfo/firewalls > > > End of Firewalls Digest --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.263 / Virus Database: 135 - Release Date: 6/22/01 _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
