smurfing

Pietro Leone <[email protected]> Wed, 13 Oct 2004 14:17:40 +0200
Newsgroups gmane.comp.security.firewalls.smoothwall.general
Organization diff.org
Message-ID <[email protected]>
Hallo, ntop server inside my network send me this log (it was longer):

2004-10-06 12:57:43	ALARM	smurfing 	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-06 12:57:44	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-06 14:48:24	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-06 14:48:25	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-08 03:52:40	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-08 03:52:41	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-08 11:44:07	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-08 11:44:08	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-09 13:58:59	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-09 13:59:00	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-10 10:28:47	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]
2004-10-10 10:28:48	ALARM	smurfing	192.168.1.3->239.255.255.253 [ICMP_ECHO]

The network is protected by smoothwall 2.0 connected to an analogic modem.

I know what is a smurf attack, but I was supposed to be protected by my 
smoothie, so why this log?

Thanks, Pietro.
-- 
I will build myself a copper tower
With four ways out and no way in
But mine the glory, mine the power
(So I chose AmigaOS and GNU/Linux)
_______________________________________________
gpl mailing list
[email protected]
http://lists.smoothwall.org/mailman/listinfo/gpl

SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall