From mboxrd@z Thu Jan  1 00:00:00 1970
From: Raymond Leach <raymondl@knowledgefactory.co.za>
Subject: Hack or what?
Date: 17 Sep 2002 10:55:34 +0200
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <1032252934.9317.6.camel@rayw>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature";
	boundary="=-L+dJuZtc5YGVleBJokH9"
Return-path: <netfilter-admin@lists.netfilter.org>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
To: netfilter@lists.samba.org


--=-L+dJuZtc5YGVleBJokH9
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Hi

Does this look like a hack attempt?

Sep 17 10:56:46 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D45 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D6691
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D25
Sep 17 10:56:47 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D45 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D6760
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D25
Sep 17 10:56:49 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D45 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D6946
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D25
Sep 17 10:56:53 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D45 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D7199
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D25
Sep 17 10:57:01 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D45 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D7654
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D25
Sep 17 10:57:09 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D45 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D8266
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D25
Sep 17 10:57:17 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D45 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D8795
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D25
Sep 17 10:57:25 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D45 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D9205
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D25
Sep 17 10:57:33 firefly kernel: DROP FORWARD INTERNAL: IN=3Deth2 OUT=3Deth0
SRC=3D10.0.0.4 DST=3D66.27.234.75 LEN=3D51 TOS=3D0x00 PREC=3D0x00 TTL=3D127=
 ID=3D9656
PROTO=3DUDP SPT=3D8912 DPT=3D69 LEN=3D31

firefly:~ # nslookup 66.27.234.75
Server:  fireflyint
Address:  10.0.0.2

Name:    bak-66-27-234-75.bak.rr.com
Address:  66.27.234.75

--=20
----------------------------------------
Raymond Leach
Internet Infrastructure
Knowledge Factory
Tel: +27-11-445-8100 Fax: +27-11-445-8101
www: http://www.knowledgefactory.co.za
----------------------------------------
"It is a man's own fault if his mind grows
 torpid in old age." - Samual Jackson

--=-L+dJuZtc5YGVleBJokH9
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQA9hu4Gh1fuR/Bv+ygRAr0WAJ9PBr7guHeLpNMmcsgTxGPcu50OywCeMkRc
Pz+gukem4+FCr87KJhw6QrM=
=exsh
-----END PGP SIGNATURE-----

--=-L+dJuZtc5YGVleBJokH9--