I have a rule set up to deny service default Source * 
Addr Range Begin 213.23.0.0
Addr Range End 213.23.255.255
Destination *
Apply thie rule always

I'm still seeing port 80 activity as my IMail log for today shows this

20020128 000028 213.23.38.248, Mozilla/Mozilla/4.0 (compatible; MSIE 5.5; Windows 98), 
http://www.sexy-fuck.de/toplisten.html, GET 
http://www.stringtanga.com/cgi-bin/TheRealTopsites/topsites.cgi?button=show HTTP/1.1
20020128 000028 213.23.38.248, Mozilla/Mozilla/4.0 (compatible; MSIE 5.5; Windows 98), 
http://www.sexy-fuck.de/toplisten.html, GET 
http://www.stringtanga.com/cgi-bin/TheRealTopsites/topsites.cgi?button=show HTTP/1.1
20020128 010859 213.23.38.248, Mozilla/Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; 
Win 9x 4.90), http://www.sexy-fuck.de, GET 
http://werban.de/hework.cgi?ID=sexyfuck&page=01 HTTP/1.1
20020128 010859 213.23.38.248, Mozilla/Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; 
Win 9x 4.90), http://www.sexy-fuck.de, GET 
http://werban.de/hework.cgi?ID=sexyfuck&page=01 HTTP/1.1
20020128 015550 213.23.38.248, Mozilla/Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 
5.0), http://www.sexy-fuck.de/toplisten.html, GET 
http://www.stringtanga.com/cgi-bin/TheRealTopsites/topsites.cgi?button=show HTTP/1.1
20020128 015550 213.23.38.248, Mozilla/Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 
5.0), http://www.sexy-fuck.de/toplisten.html, GET 
http://www.stringtanga.com/cgi-bin/TheRealTopsites/topsites.cgi?button=show HTTP/1.1


There is no damage done but I would rather cut them off at the pass  ;)

Chris

===================================================================================================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the 
following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/


Reply via email to