Re: NULL Scan issues or something else?
Le 07/02/2013 21:22, Daniel Curtis a écrit :
>>//(...)/Nothing that should bother you.
Okay, so far so good. But what about the rest of
IP addresses, which occurred in logs? You have
mentioned about a /bendel.debian.org <http://bendel.debian.org>/ website.
I wonder why?
Because that's the source of the packet you showed us
Those are packets sents by web servers (source port 80) in answer to
I noticed, that all the logged events relating to this
strange rule** mentioned earlier, are related to
/SPT=80/ and /IN=eth0/. Literally all of the connections.
What does it mean?
If you do not want to receive them you must not contact the servers.