help - under attack

[Matthias Apitz]

El día domingo, octubre 01, 2017 a las 11:34:36a. m. -0400, Ernie Luzar escribió:

> Matthias Apitz wrote:
> > El día domingo, octubre 01, 2017 a las 11:18:14a. m. -0400, Ernie Luzar escribió:
> > 
> > 
> > If you have a firewall (about which you have not said anything), how can
> > SYN-SYN-ACK happen on port 22?
> > 
> > 	matthias
> 
> My post says "My firewall blocks all inbound traffic". The login error 

The term 'inbound' is not very clear. My firewall on my FreeeBSD box
(ipf) blocks traffic incoming for certain ports, it seems that you mean
that you block incoming traffic for a complete network and the firewall
does not run on the FreeBSD box in question.

> messages do not say it on port 22. That inbound port is blocked by the 
> firewall. All pc on the lan are powered off. Even disconnected the lan 
> cable from the freebsd gateway host and still the error messages come 
> out. That is why I am asking for help here.

A I (and others) said: use TCPDUMP to see the details of the connects.

	matthias

-- 
Matthias Apitz, ✉ guru at unixarea.de, ⌂ http://www.unixarea.de/  ☎ +49-176-38902045
Public GnuPG key: http://www.unixarea.de/key.pub
8. Mai 1945: Wer nicht feiert hat den Krieg verloren.
8 de mayo de 1945: Quien no festeja perdió la Guerra.
May 8, 1945: Who does not celebrate lost the War.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20171001/479ea08b/attachment.sig>