>I'm curious if anybody explain a benign reason I may be getting these, or
>are these really attempts to look/break into my system?
Lots of people out there have WAY too much time on their hands and
they like to try and break into machines. BUT.. because you have
a good firewall ruleset, they aren't going to be able to get in!
Good job!
Anyway.. get used to it. You'll occasionlly get portscanned now
and then. If I was you, start a log of what sites are being
blocked by your ruleset and record the dates and ports they hit.
Many SERIOUS hackers out there now will run a portscan of a given
host over a MONTH or more. At this slow rate, many network admins
won't recognize that its a very slow portscan. Then with this
log, you'll know if you have a malicious hacker after your box.
--David
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]
