Summary: no subject

From: <charles.t.funderburk_at_mail.sprint.com>
Date: Fri Aug 31 2001 - 14:10:30 EDT
I'd like to thank all for their responses. Everyone was a great help!



Simple.... one of your cisco routers has your unix box listed as
a syslog host-- those are error messages from a Cisco, not a Solaris
box. However, your cisco is seeing packets which are explicitly denied
due to access lists. Port 80 is an incoming web request from somewhere
to one of paranet's servers




> I've noticed a few things scrolling through syslog the past few days.
I
> was wondering if anyone could tell me what these messages are? At
firstI
> thought it might be some type of port scan or attack? Not sure.
> 
> Aug 30 17:58:56 rtrhou3.paranet.com 7543: %SEC-6-IPACCESSLOGP: list
103
> denied tcp 216.122.86.85(80) -> 199.164.1
> 31.71(1173), 1 packet
> Aug 31 09:20:58 rtrhou3.paranet.com 7544: %SEC-6-IPACCESSLOGP: list
103
> denied tcp 203.147.251.110(59) -> 199.164
> .131.87(2351), 1 packet
> 
> Any info would be greatly appreciated. Thanks!
Received on Fri Aug 31 19:10:30 2001

This archive was generated by hypermail 2.1.8 : Wed Mar 23 2016 - 16:25:03 EDT