Oh dear, no wonder. I thought netcat would be watching inside the
firewall.
I really hate to open it as it could leak anything about me to him.
Maybe I could set up a VM with his IP to intercept traffic.
I am just now in the process of setting up Squid, with anonymize
headers. I suspect that if someone got in, it must have been through
Konqueror as my firewall is very tight and I am careful with email.
[1][email protected]


On Tue, Oct 16, 2012, at 10:40, Tom Eastep wrote:

On 10/16/2012 10:30 AM, [2][email protected] wrote:

Thanks, but I have tried that, adding -c and monitoring constantly.

netstat is blind to these, as it showed nothing even as Shorewall

blocked more. I suspect netstat monitors -source- port (which is

random), so I set Wireshark to listen for the particular IP, and it was

blind as well, when flurries of hits were blocked by Shorewall.





I can't believe this network traffic and sockets are invisible!



They won't be visible so long as you are blocking the traffic with the

firewall. You have to temporarily unblock it to be able to track it.



Do you run Squid on your firewall?



-Tom

--

Tom Eastep        \ When I die, I want to go like my Grandfather who

Shoreline,         \ died peacefully in his sleep. Not screaming like

Washington, USA     \ all of the passengers in his car

[3]http://shorewall.net
\________________________________________________



-----------------------------------------------------------------------
-------

Don't let slow site performance ruin your business. Deploy New Relic
APM

Deploy New Relic app performance management and know exactly

what is happening inside your Ruby, Python, PHP, Java, and .NET app

Try New Relic at no cost today and get our sweet Data Nerd shirt too!

[4]http://p.sf.net/sfu/newrelic-dev2dev

_______________________________________________

Shorewall-users mailing list

[5][email protected]

[6]https://lists.sourceforge.net/lists/listinfo/shorewall-users

References

1. mailto:merc1984@f
2. mailto:[email protected]
3. http://shorewall.net/
4. http://p.sf.net/sfu/newrelic-dev2dev
5. mailto:[email protected]
6. https://lists.sourceforge.net/lists/listinfo/shorewall-users

-- 
http://www.fastmail.fm - Email service worth paying for. Try it for free

------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to