View Single Post
  #1 (permalink)  
Old 2006-12-11
gfont96 gfont96 is offline
Member
 
Join Date: 2005-08-24
Posts: 74
Rep Power: 4
gfont96 has an average reputation (10+)
Default Strange SmartDefense entries

Hello All,

Like a good chap I was going through firewall logs and saw the following;

Number: 22816
Date: 11Dec2006
Time: 2:14:05
Product: SmartDefense
Attack Name: Storm Center Block List Enforcement
Attack Information: Packet originated from a host on the DShield block list
Origin: fw-module
Type: Log
Action:
Service: 1026
Source: somehost.net (x.x.x.x)
Destination: x.x.x.x.
Protocol: udp
Information: Total logs: 2
Suppressed logs: 1

These entries show as green (like accepted) but there is nothing in the interface column.

Should I be worried !

Cheers,

George
Reply With Quote