I get them from the BBC site, AOL and a few others. don't know why for sure. but it may have to do with keepalives on the web server. I heard that somewhere. it may not be correct.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jim Grossl Sent: Tue, March 19, 2002 10:01 AM To: '[EMAIL PROTECTED]' Subject: RE: [SonicWALL]- FIN scan false positives The url is: 206.124.16.186 it's a web site for Kyakers. And now that we're on the subject, I also get them from: 205.188.180.57 which is an AOL site. The AOL site is very random, but the 206.124... site happens every time my user visits the site, regular as clockwork. Jim Grossl Boise, Idaho USA -----Original Message----- From: Chris Hunt [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 19, 2002 6:13 AM To: [EMAIL PROTECTED] Subject: Re: [SonicWALL]- FIN scan false positives Soooooooo what is the URL? Would be interesting to see what happens for others and if it only applies to the XPRS2 or other models. Chris At 04:21 PM 03/18/2002 -0700, you wrote: > I get FIN scan alerts all the time from a particular >web site that one of my users frequents. I had my user >inform the site of this and their reply consisted of, >1: Criticizing our ability to think because we use a >SonicWall as a firewall. >2: Telling us the SonicWall could not tell the difference --- [This E-mail scanned for viruses by Declude/F-Prot Virus] ============================================================================ ======================= To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- [This E-mail scanned for viruses by Declude/F-Prot Virus] ============================================================================ ======================= To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- [This E-mail scanned for viruses by Declude/F-Prot Virus] =================================================================================================== To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
