We are getting a steady stream of filter blocks on the protected
interface as shown below. They are apparently coming from MSN
Messenger. Does anyone know if these packets constitute a security
risk? And if not, which filter do I need to modify to stop logging
this?
------------------------------------------------------------------------
-----
NOTIFICATION TYPE: GNAT Box FILTER ALARM
CONFIGURATION: PROTECTED=192.168.0.1
------------------------------------------------------------------------
-----
ALARM NO: 1
DATE: Monday, Jan 28, 2002
TIME: 07:58:27
INTERFACE: PRO (rl0)
ALARM TYPE: Block
IP PACKET: UDP [192.168.0.227/1218]-->[192.168.0.1/1900] l=132
Thanks,
_____
Mike Ayers
[EMAIL PROTECTED]
