[Dshield] routing 192.168...?

Hunt, Andrew AHunt at STRAUB.NET
Mon May 2 19:23:38 GMT 2005


Perhaps it's a probe designed to evade reporting since Dshield and most
other loggers filter out local address ranges.

Regards,

Drew Hunt
UNIX & Security Support
Hawaii Pacific Health
ahunt at straub.net 


-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of Daniel Cherton
Sent: Sunday, May 01, 2005 6:15 PM
To: General DShield Discussion List
Subject: Re: [Dshield] routing 192.168...?


Hi Mark,

I am not absolutely sure but, since it is a home network and I am using 
router/firewall and ZoneAlarm in every
computer, I think it is coming from outside. I check setup and logs from 
ZoneAlarm and found nothing going out.
Can it still be possible ?

Daniel

Mark Owen wrote:

>> Ping of Death Detect src:192.168.1.10:2961 dst:my-internet-ip:42617 
>> Packet Dropped
>>    
>>
>
>Are you sure it came from the untrust and not an internal network?
>
>--
>Mark Owen
>
>-------------- Sponsor Message ------------------------------------
>Join us at SANSFIRE 2005 in Atlanta!
>The Internet Storm Center Conference.
>Details: http://www.sans.org/sansfire2005
>
>_______________________________________________
>send all posts to list at lists.dshield.org
>To change your subscription options (or unsubscribe), see: 
>http://www.dshield.org/mailman/listinfo/list
>
>
>
>  
>



-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.11.0 - Release Date: 4/29/2005

-------------- Sponsor Message ------------------------------------
Join us at SANSFIRE 2005 in Atlanta!
The Internet Storm Center Conference.
Details: http://www.sans.org/sansfire2005

_______________________________________________
send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list

**************************************************************************************************
CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, 
is for the sole use of the intended recipient(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure or distribution is 
prohibited.  If you are not the intended recipient, please contact the sender by reply 
e-mail and destroy all copies of the original message



More information about the list mailing list