NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] newbie question



Personally I would feel unloved if I was not port scanned at least once a day.

Regards

David A Phillips CISSP, MCSE
Ft Worth, TX 76113=====================================================================
This message may contain confidential and/or proprietary information,
and is intended only for the person/entity to whom it was originally
addressed. The content of this message may contain private views and
opinions which do not constitute a formal disclosure or commitment
unless specifically stated. Should you receive this message by mistake
please inform the sender immediately.
=====================================================================

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of Joe
Pampel
Sent: Monday, October 08, 2001 12:16 PM
To: [email protected]
Subject: Re: [FW-1] newbie question


MAD = Malicious Activity Detection.  It's in the manual. ;-)  Your FW is trying to tell you that
you're getting port scanned. Don't get too excited though, if you're like the rest of us you
will get scanned 24/7/365... some folks need to get a life!

HTH,

Joe

>>> Alexander Fabri <[email protected]> 10/08/01 10:39AM >>>
One of the lines in my log reads as follows :


"13893"  "4Oct2001"  "10:23:32"  "daemon"  "127.0.0.1"  "alert"
"accept"  ""  "Source ip x.x.x.x"  "Destination ip x.x.x.x"  "ip"  ""
""  ""  ""  ""  ""  ""  ""  ""  ""  ""  "MAD"  " additionals:
a1ttack=blocked_connection_port_scanning"


Could somebody please explain what MAD means as I did not find anything
on phoneboy FAQ's.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.