Re: Logcheck warning: UDP packet from outside my network?
On Fri, 04 Jun 2004 19:50:10 +0200, Paul Johnson <baloo@ursine.ca>
wrote:
> Matthijs <vanaalten@hotmail.com> writes:
>
> > Jun 4 07:30:54 MyMail kernel: UDP: short packet: 24.5.180.234:10030
> > 2167/119 to 192.168.1.2:10768
> >
> > I'm not really interested in what these packets are for (I guess some
> > kind of worm/DoS related packets), but I'm more interested in the
> > source of the packets: 24.5.180.234 is *outside* my network.
>
> So? Some applications use UDP instead of TCP, what's the problem with
> that?
I've got no problem at all with packets using UDP or TCP - my problem
was that they seem to originate from *outside* my network, while I
thought my system was shielded with a hardware firewall.
According to a post from Bojan Baros, I thought wrong here: it's
likely (haven't tested it yet) that my firewall doesn't protect me
from UDP-packets.
--
Matthijs
vanaalten@hotmail.com
Reply to: