I get these also. this is ad.doubleclick.net - you'll find them from a variety of 
other websites.

What happens is you connect to a website which connects you to the ad server - during 
the time that you are connected there the sonicwall 'times out' your connection, and 
the ad server tries to continue communicating with you - thus triggering an event.

Since this particular one is an ad server, you might consider blocking it.

-Jim




-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Monday, June 02, 2003 1:26 PM
To: [EMAIL PROTECTED]
Subject: [SonicWALL]- TCP FIN Scans?


Recently I have been receiving multiple TCP FIN scans per day coming
from a specific address.  Listed below is an excerpt from our SonicWALL:

Probable TCP FIN scan -         Source:216.73.82.11, 80

The destination of course is that of our SonicWALL's public IP address.

Anyone know how to stop this?  I get about 6-7 emails per day (during
business hours only), all identical from the same IP address listed
above.  Any help would really be appreciated.  Thanks.

Marcus D. Gand
Director of Information Technologies
LaurenKamtech, Inc.
[EMAIL PROTECTED]



NOTICE TO OUR CUSTOMERS:
All laurenec.com email addresses have now changed format to 

[EMAIL PROTECTED]  While the old format may still 

work, it is recommended that you update your address books to the new 

format.  Thank you. – LaurenKamtech I.T. Department


---
[This E-mail scanned for viruses by Declude/F-Prot AV]

=================================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the 
following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/




LEGAL NOTICE:
Unless expressly stated otherwise, this message is confidential and may be privileged. 
It is intended for the addressee(s) only. Access to this e-mail by anyone else is 
unauthorized. If you are not an addressee, any disclosure or copying of the contents 
or any action taken (or not taken) in reliance on it is unauthorized and may be 
unlawful. If you are not an addressee, please inform the sender immediately.
---
[This E-mail scanned for viruses by Declude/F-Prot AV]

==================================================================================================To
 unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the 
following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/


Reply via email to