[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Hacked??

I hope so but why would I have two of my systems on different
networks (but on the same domain) try to access a private address
(and not just one either. That line was just a sample) at the same
time. That's weird?? Isn't it?

Best regards,
Philippe Clérié (philippe@gcal.net)

----- Original Message -----
From: Ed Street <blacknet@phenixcable.net>
To: Philippe Clérié <philippe@gcal.net>; Debian Firewall
Sent: Friday, 22 June, 2001 14:46
Subject: RE: Hacked??

> Hello,
> Simply a namedserver request that was blocked.
> Ed
> -----Original Message-----
> From: Philippe Clérié [mailto:philippe@gcal.net]
> Sent: Friday, June 22, 2001 3:12 PM
> To: Debian Firewall
> Subject: Hacked??
> I have found several lines like the one below in my logs on two
> systems and at the same time. That private IP should not be there
> and something must have triggered it. Have I been hacked??
> Jun 22 12:26:45 antares kernel: Packet log: output DENY eth1
> PROTO=17 myaddress:1024 L=65 S=0x00 I=30577 F=0x0000
> T=64 (#2)
> Best regards,
> Philippe Clérié (philippe@gcal.net)
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org

Reply to: