Snort mailing list archives
How?
From: "snortlst snortlst" <snortlst () hotmail com>
Date: Thu, 06 Dec 2001 16:04:34 -0500
I have i firewall taht protects my network and inside my network. All workstation addresses are from 10.0.x.x and are NATed to the external address of the firewall. In my snort I receive the alert that some Compaq Traversal bla bla bla attack was directed to 10.0.86.3.
AFAIK people on the internet see only external ip of my firewall (to which all workstations are NATed) and cannot attack directly 10.0.86.3 address.
If I'm correct in this then how come alert is reproted to 10.0.86.3? Do I miss something here? thx _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How? snortlst snortlst (Dec 06)