From mboxrd@z Thu Jan  1 00:00:00 1970
From: Raymond Leach <raymondl@knowledgefactory.co.za>
Subject: Re: What does this mean ?
Date: 19 Mar 2003 13:05:01 +0200
Sender: netfilter-admin@lists.netfilter.org
Message-ID: <1048071901.2375.34.camel@raylinux.internal>
References: <628F610E-59F0-11D7-A859-0003938423EC@earthtvnet.com>
Reply-To: raymondl@knowledgefactory.co.za
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-buNe4WCEk5FV9hbG/Kwm"
Return-path: <netfilter-admin@lists.netfilter.org>
In-Reply-To: <628F610E-59F0-11D7-A859-0003938423EC@earthtvnet.com>
Errors-To: netfilter-admin@lists.netfilter.org
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: <https://lists.netfilter.org/pipermail/netfilter/>
To: Netfilter Mailing List <netfilter@lists.netfilter.org>


--=-buNe4WCEk5FV9hbG/Kwm
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

That would be IE clients browsing the web. IE is the only browser I've
found that does this.

On Wed, 2003-03-19 at 11:51, Frederic Gobin wrote:
> Hi there everybody,
>=20
> I have one question :
>=20
> 	Each time I look into my firewall logs, I see many dropped packets=20
> that match this pattern :
>=20
> 	Protocol 		: TCP
> 	Source port	: 80
> 	Dest port		: 1024-65535
> 	Flags		: ACK FIN
>=20
> Where are those packets comming from ?
>=20
> Thanks for reading and Thanks for each answer I get ...
>=20
> Frederic Gobin
--=20
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
(  Raymond Leach                       )
 ) Knowledge Factory                  (
(                                      )
 ) Tel: +27 11 445 8100               (
(  Fax: +27 11 445 8101                )
 )                                    (
(  http://www.knowledgefactory.co.za/  )
 ) http://www.saptg.co.za/            (
(  http://www.mapnet.co.za/            )
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   o                                o
    o                              o
        .--.                  .--.
       | o_o|                |o_o |
       | \_:|                |:_/ |
      / /   \\              //   \ \
     ( |     |)            (|     | )
     /`\_   _/'\          /'\_   _/`\
     \___)=3D(___/          \___)=3D(___/


--=-buNe4WCEk5FV9hbG/Kwm
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA+eE7dh1fuR/Bv+ygRApagAJ9qIywNPVjVhxuCMoxgJC+KLVhg2wCggQse
iNO/1xHP+5OX3krAo3yhPL0=
=BC32
-----END PGP SIGNATURE-----

--=-buNe4WCEk5FV9hbG/Kwm--