[ posted again after sending to security@ - sorry for those subscribing to both] Hi list, I saw this in my ipf.log (using ipfmon):
18/05/2004 15:57:21.092537 fxp0 @25:1 S w.x.y.z -> a.b.c.d PR tcp len 20 (40) frag [EMAIL PROTECTED] IN
where : - fpx0 is my interface connected to the outside world - w.x.y.z is an IP not related to any system under our control - a.b.c.d is the public IP used for NATed traffic from our LAN. - @25:1 is : @1 block in log quick from any to any with short group 25
Does the "S" after @25:1 mean it was a packet too short to be a proper tcp packet?
What does the frag [EMAIL PROTECTED] mean?
Thanks in advance! Beto _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
