RE: [FW1] Firewall log info

["Roelandts, Guy" <Guy.Roelandts@FW1-NOSPAMcompaq.com>]

More info needed,

 

    Just someone on the outside trying to ping you or something else with ICMP,

look at the Info. Column in the log viewer and check the ICMP Type and Code,

that will tell you more ... if its ICMP Type 0, it's a reply, if it's type 8 it's an

echo ... and so on. Without the Type and Code we won't be able to tell you more

Met vriendelijke groeten - Bien à vous - Kind regards

Guy ROELANDTS
EMEA GS Internet Expertise Centre
Compaq Software Engineer - Belgium
E-mail : Guy.Roelandts@compaq.com
Tel: +32(02)729.77.44 (options  3 - 3 - 1)
Fax: +32(02)729.77.65

-----Original Message-----
From: security@247customer.com [mailto:security@247customer.com]
Sent: Tuesday, July 24, 2001 2:50 PM
To: fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: [FW1] Firewall log info

Hi all,

 

I observed this on Firewall log...

 

Source                            Destination       Service         action

 

168.100.189.180                  Firewall         ICMP            drop thru rulebase no..

203.166.4.236                      Firewall        ICMP            drop thru rulebase no...

 

Is that any of my network workstations are compromised ?

 

regs

 

sat