NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] newbie question



MAD = Malicious Activity Detection.  It's in the manual. ;-)  Your FW is trying to tell you that
you're getting port scanned. Don't get too excited though, if you're like the rest of us you
will get scanned 24/7/365... some folks need to get a life!

HTH,

Joe

>>> Alexander Fabri <[email protected]> 10/08/01 10:39AM >>>
One of the lines in my log reads as follows :


"13893"  "4Oct2001"  "10:23:32"  "daemon"  "127.0.0.1"  "alert"
"accept"  ""  "Source ip x.x.x.x"  "Destination ip x.x.x.x"  "ip"  ""
""  ""  ""  ""  ""  ""  ""  ""  ""  ""  "MAD"  " additionals:
a1ttack=blocked_connection_port_scanning"


Could somebody please explain what MAD means as I did not find anything
on phoneboy FAQ's.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.