Re: [Somewhat OT] - Why would a web server ping me? (Bob McDowell)

[Always Bishan <bishan4u () yahoo co uk>]

hi


> get a ton of what I thought were false positives
> from spp_portscan2

me too.

>  Plus I get a lot of 443 and icmp type 8
> directed at the proxy server
> that bounce off of the iptables firewall.

i get portscans invoked by spp_portscan2 from and
towards port no. 80,53,25 . 

i don't have any clue why does any website,dns server
or smtp server is showing a portscan for my network.?

snort is also logging portscans from my network on
these internet ports. but i'm not doing any portscans.

i'm getting these alerts very often. i'm clueless @
this

ne help?

Bishan

__________________________________________________
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com


-------------------------------------------------------
This SF.net email is sponsored by:Crypto Challenge is now open! 
Get cracking and register here for some mind boggling fun and 
the chance of winning an Apple iPod:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users