Hello John Fleming (<[EMAIL PROTECTED]>) wrote:
> Is this coming from my firewall (Firestarter) somehow? If so, why?? > 64.105.56.109 is my IP, but I don't know what the other one is > 64.105.106.5) Thanks - John > > Appears on console screen, over and over, but not on remote ssh > screen: > > IN=eth0) OUT= MAC= 00:c0:9f:38:15:eb:00:e0:eb:74:7f:C8:08:00: > SRC=64.105.106.5 DST=64.105.56.109 LEN=48 TOS=0x00 PREC=0x00 TTL=119 > ID=9735 DF PROTO=TCP SPT= 2074 DPT=135 WINDOW=65280 RES=0x00 SYN > URGP=0 Someone's trying to connect to your machine on port 135. Isn't this the port the RPC service on windows runs? Could be some virus trying to find some Windows box. best regards Andreas Janssen -- Andreas Janssen <[EMAIL PROTECTED]> PGP-Key-ID: 0xDC801674 ICQ #17079270 Registered Linux User #267976 http://www.andreas-janssen.de/debian-tipps.html -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]