How?

["snortlst snortlst" <snortlst () hotmail com>]

I have i firewall taht protects my network and inside my network. All 
workstation addresses are from 10.0.x.x and are NATed to the external 
address of the firewall.
In my snort I receive the alert that some Compaq Traversal bla bla bla 
attack was directed to 10.0.86.3.

AFAIK people on the internet see only external ip of my firewall (to which 
all workstations are NATed) and cannot attack directly 10.0.86.3 address.
If I'm correct in this then how come alert is reproted to 10.0.86.3?
Do I miss something here?
thx

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users