Hi, looks like someone from you internal network attacks an outside irc server and not the other way round like the others say. I would try to find the evil creature inside and kill him. ct > -----Urspr�ngliche Nachricht----- > Von: Dirk Boenning [mailto:[EMAIL PROTECTED]] > Gesendet: Dienstag, 1. August 2000 18:20 > An: 'Firewall-1 Mailing list' > Betreff: [FW1] Urgent. I'm under attack > > > > Hello, > > till a couple of minutes I'm under an attack. I never have seen this > behaviour. > I have round 'bout 50000 active connections. The Destination for all > of these connections is irc.arnes.si (193.2.1.34). The Source is an > internal IP. The internal IP is not one specific IP it's changing all > over > the whole subnet, even if no machine is assigned to this IP. But not > even the > IP's cycle through all values the ports do also. > > I'm sure that IP spoofing is correct configured. The all over system > works > since 2 years. > > Any idea how to stop, what to change ?? > > Tia, Dirk. > > BTW. It's Firewall 4.0 under Solaris 2.6 > > > > -- > ______________________________________________________________ > | _|_|_| _|_| _|_|_| _|_|_| _|_|_| _| _| | > | _| _| _| _| _| _| _| _| _|_| _|_| | > | _| _|_|_|_| _|_|_| _| _| _| _| _| _| | > | _| _| _| _| _| _| _| _| _| | > | _|_|_| _| _| _| _|_|_| _|_|_| _| _| | > |______________________________________________________________| > | CAPCom Technologie Beratung | Dirk Boenning | > | Entwicklung und Vertrieb GmbH | Tel.: +49 (0)6151/155-900 | > | Rundeturmstrasse 6 | Fax.: +49 (0)6151/155-909 | > | 64283 Darmstadt / Germany | E-Mail: [EMAIL PROTECTED] | > |______________________________________________________________| > > > ============================================================== > ================== > To unsubscribe from this mailing list, please see the > instructions at > http://www.checkpoint.com/services/mailing.html > ============================================================== > ================== > ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
