At 04:24 PM 7/13/98 +0500, Alexander Kandelaki wrote:
>
>Hi all!
>
>Once I run netstat and received :
>
>tcp 0 0 access.pop3 ppp170-tc3.1658 TIME_WAIT
>tcp 0 87 access.smtp egeo.unipg.it.4930 ESTABLISHED
>tcp 0 169 access.smtp ARMINCO.COM.51685 ESTABLISHED
>tcp 0 0 access.3314 192.168.1.2.smtp SYN_SENT
> ^^^^^^^^^^^^^^^^
>tcp 0 0 access.smtp interfuture.com.3509 TIME_WAIT
>
>I haven't any proxy server installed on my system or something look like
>it. Strange why in my system i see this IP ? What is it ?
My guess is someone either a) has an incorrectly set firewall/proxy gateway
system or b) is trying to hack/break your machine
My guess is that it's b), since people who try to hack/break your machine
try to hide who they are by spoofing their IP.
--Ludwig Pummer
ludwigp@bigfoot.com
ICQ UIN: 692441 http://chipweb.home.ml.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message