Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the '10.5: Use a custom firewall in 10.5 with ipfw' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Use a custom firewall in 10.5 with ipfw
Authored by: fortepianissimo on Feb 07, '10 12:12:06PM

A question guys: using the rules posted in this hint, I'm seeing a lot of deny messages outbound from my port 22!

Feb 7 14:34:41 localhost Firewall[17960]: 302 Deny TCP 10.0.1.2:22 117.21.241.10:43048 out via en1
Feb 7 14:34:44 localhost Firewall[17960]: 302 Deny TCP 10.0.1.2:22 117.21.241.10:43048 out via en1
Feb 7 14:34:49 localhost Firewall[17960]: 302 Deny TCP 10.0.1.2:22 117.21.241.10:43048 out via en1
...

the IP address was from China. Should I worry?

Edited on Feb 07, '10 12:15:08PM by fortepianissimo



[ Reply to This | # ]
10.5: Use a custom firewall in 10.5 with ipfw
Authored by: fortepianissimo on Feb 07, '10 01:15:11PM

Mystery solved: some SOB was doing a dictionary attack on my port 22. Now I turned off password login.



[ Reply to This | # ]