Re: Hacked??
I hope so but why would I have two of my systems on different
networks (but on the same domain) try to access a private address
(and not just one either. That line was just a sample) at the same
time. That's weird?? Isn't it?
Best regards,
Philippe Clérié (philippe@gcal.net)
----- Original Message -----
From: Ed Street <blacknet@phenixcable.net>
To: Philippe Clérié <philippe@gcal.net>; Debian Firewall
<debian-firewall@lists.debian.org>
Sent: Friday, 22 June, 2001 14:46
Subject: RE: Hacked??
> Hello,
>
> Simply a namedserver request that was blocked.
>
> Ed
>
>
> -----Original Message-----
> From: Philippe Clérié [mailto:philippe@gcal.net]
> Sent: Friday, June 22, 2001 3:12 PM
> To: Debian Firewall
> Subject: Hacked??
>
>
> I have found several lines like the one below in my logs on two
> systems and at the same time. That private IP should not be there
> and something must have triggered it. Have I been hacked??
>
> Jun 22 12:26:45 antares kernel: Packet log: output DENY eth1
> PROTO=17 myaddress:1024 10.0.8.40:53 L=65 S=0x00 I=30577 F=0x0000
> T=64 (#2)
>
> Best regards,
> Philippe Clérié (philippe@gcal.net)
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
Reply to: