Actually Randy, if you will re-read my original first sentence, it says my
router IS blocking those incoming packets.
I was really curious abot thew 10.x.x.x address especially because I thought
it was supposed to be private AND because I have seen that address a lot in
the log as being blocked. As far as my ISP checking if I was running a web
site, I guess that may make sense and I honestly don't know if my ToS
prohibit me doing so.
Thanks folks !!
On 1/5/07, Randy Melder <
randymelder@gmail.com> wrote:
>
> never say never...
>
> The 10.x.x.x network is 'reserved' for private use, but alas... our
> enemies to the east route these address blocks for black hat ops.
>
> Your router ACL should include rules denying traffic inbound from the
> private networks:
> 10.0.0.0 /8
> 172.16.0.0 /12 (I think)
> 192.168.0.0 /16
>
> It sounds like this rule isn't in force and you'll need to implement per
> your router setup.
>
> ; ) .randy
>
>
>
> On 1/5/07, Jon M. Hanson <jon@the-hansons-az.net> wrote:
> >
> > An IP address starting with 10 Is a private address and is not routeable
> > on the Internet. Someone is likely spoofing their source address if you're
> > not using that as your network.
> >
> > As far as your ISP probing port 80, it may be against your Terms of
> > Service to run a webserver so they may be checking if you are.
> >
> > ------- Original Message -------
> > From: Dazed_75 <lthielster@gmail.com>
> > To: "Main PLUG discussion list" < plug-discuss@lists.plug.phoenix.az.us>
> > Sent: 01/05/07, 05:19:05 PM
> > Subject: OT - Am I being probed or ?
> >
> > The incoming log on my router shows repeatedly blocking 10.20.71.1 from
> > accessing a port? name of bootpc using udp. What does this mean?
> >
> > The other one I see repeating seems to be form my ISP (Mediacom) who
> > apparently leases facilities from AT&T. that is 12.201.126.113 sending
> > TCP
> > traffic to a port identified in the log as WWW. Any idea why they would
> > be
> > doing that (whatever it is).
> >
> > BTW, my router is a Linksys WRT54GL with *v4.71.1, Hyperwrt 2.1b1 +
> > Thibor15c [May 12 2006]*
> >
> > --
> > Be who you are and say what you feel, because those who mind don't
> > matter
> > and those who matter don't mind. - Dr. Seuss
> >
> > ---------------------------------------------------
> > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change you mail settings:
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >
>
>
>
> --
>
>
>
> http://spindomains.us/
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
>
--
Be who you are and say what you feel, because those who mind don't matter
and those who matter don't mind. - Dr. Seuss
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)