This morning I noticed some odd traffic that I'm not sure how to explain. The traffic looked like this:
0,12:21:11 PM,192.168.1.2,gnatbox,LOCAL0,ERROR,Aug 25 11:37:09 NAT: Illegal forward attempt by: TCP xl0 [192.168.2.252/1065]->[123.34.25.7/21] l=0 f=0x2. Is this indicative of an attempted hack, or could this have been done by accident? I know the source IP, as they do business with us, so I'm not inclined to believe this is a hack...but what does this traffic mean? Thanks, John
