>From http://www.robertgraham.com/pubs/firewall-seen.html

6970 RealAudio Clients receive incoming audio streams from servers on UDP
ports in the range 6970-7170. This is setup by the outgoing control
connection on TCP port 7070.  

Might be someone on the inside trying RA.


-----Original Message-----
From: Niclas Ek [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 01, 2001 9:57 AM
To: [EMAIL PROTECTED]
Subject: stange log entry


--------------------- Attention -----------------------------
A digest version of this list is now available.
Send email to [EMAIL PROTECTED], with the following message:
subscribe gb-users-digest your_email_address
Then unsubscribe from this list.
-------------------------------------------------------------
GNAT Box User Forum http://www.gnatbox.com/cgi-bin/Ultimate.cgi
Send postings to: [EMAIL PROTECTED]
Access the list archives at: http://www.gnatbox.com/gb-users/
-------------------------------------------------------------
I have started to get alot of hits to port 6970 from different IP
addresses:

     ALARM NO: 1
          DATE: Mon 2001-10-01 16:19:17 EEST
     INTERFACE: EXTERNAL (fxp1)
INTERFACE TYPE: External
    ALARM TYPE: Block
     IP PACKET: UDP  [208.36.115.51/1094]-->[195.163.185.50/6970]  l=290

DETAILED DESCRIPTION:
        IP packet was rejected.


-- 
Niclas Ek, IT Specialist 
First Hop Ltd, Tekniikantie 12, FIN-02150 Espoo, Finland
Tel:  +358 9 2517 2325 +358 40 7587870 (mobile)  Fax: +358 9 2517 2422
[EMAIL PROTECTED]

----------------------------------------------
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe gb-users your_email_address
in the body of the message

Reply via email to