I hope so but why would I have two of my systems on different
networks (but on the same domain) try to access a private address
(and not just one either. That line was just a sample) at the same
time. That's weird?? Isn't it?
Philippe Clérié (firstname.lastname@example.org)
----- Original Message -----
From: Ed Street <email@example.com>
To: Philippe Clérié <firstname.lastname@example.org>; Debian Firewall
Sent: Friday, 22 June, 2001 14:46
Subject: RE: Hacked??
> Simply a namedserver request that was blocked.
> -----Original Message-----
> From: Philippe Clérié [mailto:email@example.com]
> Sent: Friday, June 22, 2001 3:12 PM
> To: Debian Firewall
> Subject: Hacked??
> I have found several lines like the one below in my logs on two
> systems and at the same time. That private IP should not be there
> and something must have triggered it. Have I been hacked??
> Jun 22 12:26:45 antares kernel: Packet log: output DENY eth1
> PROTO=17 myaddress:1024 10.0.8.40:53 L=65 S=0x00 I=30577 F=0x0000
> T=64 (#2)
> Best regards,
> Philippe Clérié (firstname.lastname@example.org)
> To UNSUBSCRIBE, email to email@example.com
> with a subject of "unsubscribe". Trouble? Contact