ICQ and, if I remember correctly, some streaming video protocols use UDP 6970. Sometimes when one of the packets arrives late, it is seen as an unsolicited inbound connection.
Chances are you have someone in the office using ICQ or watching a streaming video. Mike Burden Lynk Systems http://www.lynk.com (616)532-4985 [EMAIL PROTECTED] > -----Original Message----- > From: Niclas Ek [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, September 12, 2001 7:44 AM > To: [EMAIL PROTECTED] > Subject: Hack attempt? > > > --------------------- Attention ----------------------------- > A digest version of this list is now available. > Send email to [EMAIL PROTECTED], with the following message: > subscribe gb-users-digest your_email_address > Then unsubscribe from this list. > ------------------------------------------------------------- > GNAT Box User Forum http://www.gnatbox.com/cgi-bin/Ultimate.cgi > Send postings to: [EMAIL PROTECTED] > Access the list archives at: http://www.gnatbox.com/gb-users/ > ------------------------------------------------------------- > Hi! > > I have started getting following log entries, with different source IP > and source port time to time: > > -------------------------------------------------------------- > ------------ > ALARM NO: 1 > DATE: Wed 2001-09-12 08:12:20 EEST > INTERFACE: EXTERNAL (fxp1) > INTERFACE TYPE: External > ALARM TYPE: Block > IP PACKET: UDP > [208.36.115.150/1079]-->[195.163.185.50/6970] l=290 > > DETAILED DESCRIPTION: > IP packet was rejected. > > -------------------------------------------------------------- > ------------ > > My question is, what is happening. > > -- > Niclas Ek, IT Specialist > First Hop Ltd, Tekniikantie 12, FIN-02150 Espoo, Finland > Tel: +358 9 2517 2325 +358 40 7587870 (mobile) Fax: +358 9 2517 2422 > [EMAIL PROTECTED] > > ---------------------------------------------- > To Unsubscribe: send mail to [EMAIL PROTECTED] > with "unsubscribe gb-users your_email_address > in the body of the message >
