On 9 Apr 2002 at 11:12, Ralph Los wrote: > ::04/03/2002 07:17:04.256 - Denied UDP packet from LAN - > ::Source:10.1.11.98, > ::68, LAN - Destination:255.255.255.255, 67, LAN - - > Reply--> Uhhh....that's weird. Why is your lan-side sending out broadcasts > on port 68-67? You may > want to look into this; check host at 10.1.11.98 and see what's on > it, maybe a trojan? > :: > ::04/03/2002 07:17:04.272 - Broadcast packet dropped - > ::Source:10.1.11.99, > ::67, LAN - Destination:255.255.255.255, 68, LAN - Code:17 - > Reply--> YES, definitely work looking into, see above. I'd check this > ASAP.
Ports 67 and 68 are used by DHCP (as well as BOOTP). Isn't it possible that these 2 machines are attempting to renew a DHCP lease? I'm not familiar with DHCP as I use fixed IPs on all my LAN machines, but maybe that's worth checking. Dan --- D.C. Crichton email: [EMAIL PROTECTED] Senior Systems Analyst tel: +44 (0)121 706 6000 Computer Manuals Ltd. fax: +44 (0)121 606 0477 Computer book info on the web: http://computer-manuals.co.uk/ Want to earn money? Join our affiliate network! http://computer-manuals.co.uk/affiliate/ _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
