>>>>> ""Paul" == "Paul Sack <[EMAIL PROTECTED]>" <[EMAIL PROTECTED]> writes:
"Paul> question re: why the host can connect, please run
"Paul> /sbin/route and show the output. My guess is you don't have
"Paul> portsentry configured to block hosts in the manner you
"Paul> desire. (I don't even know if it's possible without
"Paul> installing ip wrappers. I think route can only block
"Paul> outgoing packets.) You can always run nmap or something
Hrm. Doesn't show anything, but running ipchains/ipfwadm reveals that
my kernel doesn't support firewall chains. I enabled network
firewalls and IP firewalling; what else should I enable to get
ipchains working?
"Paul> and try to figure out what sort of host is trying to
"Paul> connect. I suspect it is some silly windows program w/ a
"Paul> badly designed protocol.
Actually, nmap reports it as a Linux 2.1/2.2 box. Anyhow, I'll just
let the guy keep it up; he should get tired eventually. :) AFAIK it
isn't causing any problems with the exception of the logcheck reports
indicating dozens of system attacks, but ah well. :)
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]
