Re: smurfing

Samuel Gordon-Stewart <smoothwallsamuel-/[email protected]> Thu, 14 Oct 2004 01:25:04 -0700 (PDT)
Newsgroups gmane.comp.security.firewalls.smoothwall.general
Message-ID <[email protected]>
--- Pietro Leone <[email protected]> wrote:
> Hallo, ntop server inside my network send me this
> log (it was longer):
> 2004-10-06 12:57:43	ALARM	smurfing 
> 192.168.1.3->239.255.255.253 [ICMP_ECHO]
<A few million similar entries snipped>
> I know what is a smurf attack, but I was supposed to
> be protected by my 
> smoothie, so why this log?
If you look closely, the ICMP Echo is going FROM
192.168.1.3 TO 239.255.255.253.
SW protects internal networks from the internet, not
the other way around.

samuel

=====
I must be really old in dog years!
Listen to my lovely music www.thefunkyasylum.com/notnice.mp3
Protect your network www.smoothwall.org


		
_______________________________
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com
_______________________________________________
gpl mailing list
[email protected]
http://lists.smoothwall.org/mailman/listinfo/gpl

SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall