[FW1] suspicious behavior

[Raed Al-Zoubi <zoubi1@FW1-NOSPAMjust.edu.jo>]

Hi all,

We have Firewall-1 3.0b on Solaris 2.6 it stands between our secured
internal network ip's are  (x.x.x.x) which are class A addreses and the
external ip's ( y.y.y.y ) which are class C real IP addresses and of
course the Internet . all the outside world and including all our real IPs
that are outside the firewall machine are not allowed to telnet into any
of the internal hosts x.x.x.x and of course the firewall machine itself.
today i noticed a strange suspicious behavior when I am logged on any host
with a real ip y.y.y.y i noticed :
1) when trying to log into the firewall machine ( using telnet ) it gives:
	connect to address ( firewall address ) : connection refused
then 	connected to hostname.ourdomain
	Escape character is '^]'.
	(tntx.chiega) Enter password:

	where is x is the internal ip of the firewall machine

2) when trying to log into any of the internal ips ( using telnet ) it
gives
	Trying x.x.x.x
Connected to x.x.x.x
Escape character is '^]'.


(tntx.chiega) Enter password:


	I dont know how this happens and what tntx.chiega  means , that
make me confused and suspicious. I will highly appreciate any comments or
clarifications

best regards
-------------------------------------------------------------------------
Raed Al-Zou'bi
Systems Engineer
Computer Center 
Jordan University of Science and Technology
P.O. Box 3030 - 22110
Irbid - Jordan
Phone : 962 2 7095111 ext. 23365
Mobile:  962 79 601339
Fax : 962 2 7095011
--------------------------------------------------------------------------



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================