Newsgroup: it.comp.sicurezza.windows
Titolo: Log Firewall

Ho inserito nel firewall qualche filtro sui pacchetti ICMP in ingresso,
premesso che non fatto altro oltre ad aprire la connessione, secondo voi
questo log significa che ho inserito regole troppo restrittive o che si
tratta di qualche lan scan?
1,[06/Sep/2002 19:34:42] Rule 'Incoming ICMP Ping': Blocked: In ICMP [8]
Echo Request, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:34:46] Rule 'Incoming ICMP Ping': Blocked: In ICMP [8]
Echo Request, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:34:50] Rule 'Incoming ICMP Ping': Blocked: In ICMP [8]
Echo Request, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:35:16] Rule 'Incoming ICMP Ping': Blocked: In ICMP [8]
Echo Request, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:42:36] Rule 'Incoming ICMP Echo Reply': Blocked: In ICMP
[0] Echo Reply, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:42:40] Rule 'Incoming ICMP Echo Reply': Blocked: In ICMP
[0] Echo Reply, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:42:42] Rule 'Incoming ICMP Echo Reply': Blocked: In ICMP
[0] Echo Reply, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:42:46] Rule 'Incoming ICMP Echo Reply': Blocked: In ICMP
[0] Echo Reply, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:42:50] Rule 'Incoming ICMP Echo Reply': Blocked: In ICMP
[0] Echo Reply, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:42:52] Rule 'Incoming ICMP Echo Reply': Blocked: In ICMP
[0] Echo Reply, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:42:56] Rule 'Incoming ICMP Echo Reply': Blocked: In ICMP
[0] Echo Reply, 62.211.175.104->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:43:42] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 151.99.75.217->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:42] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 195.22.197.125->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:44] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 195.22.209.233->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:46] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 
r-mi225-vl2.opb.interbusiness.it
[151.99.57.226]->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:43:46] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 195.22.205.237->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:48] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 217.147.129.189->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:50] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 151.99.57.223->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:50] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 151.99.75.153->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:52] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 195.22.208.7->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:43:52] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 
r-mi225-vl2.opb.interbusiness.it
[151.99.57.226]->localhost, Owner: Tcpip Kernel Driver
1,[06/Sep/2002 19:43:54] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 151.99.57.223->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:54] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 151.99.75.195->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:56] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 151.99.75.217->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 19:43:56] Rule 'Incoming ICMP Time Exceeded': Blocked: In
ICMP [11] Time Exceeded, 195.22.197.133->localhost, Owner: Tcpip Kernel
Driver
1,[06/Sep/2002 20:05:14] Rule 'Incoming ICMP Destination Unreachable':
Blocked: In ICMP [3] Destination Unreachable, 217.208.49.4->localhost,
Owner: Tcpip Kernel Driver
1,[06/Sep/2002 20:50:32] Rule 'Tiny Personal Firewall Console': Blocked: In
UDP, 212.216.112.112:53->localhost:1571, Owner: C:\PROGRAMMI\TINY PERSONAL
FIREWALL\PFWADMIN.EXE
1,[06/Sep/2002 20:50:34] Rule 'Tiny Personal Firewall Console': Blocked: In
UDP, 212.216.112.112:53->localhost:1571, Owner: C:\PROGRAMMI\TINY PERSONAL
FIREWALL\PFWADMIN.EXE
1,[06/Sep/2002 20:50:36] Rule 'Tiny Personal Firewall Console': Blocked: In
UDP, 212.216.172.62:53->localhost:1571, Owner: C:\PROGRAMMI\TINY PERSONAL
FIREWALL\PFWADMIN.EXE
--------------------------------
Inviato via 
http://usenet.libero.it

significa che ho inserito regole troppo restrittive
Fai te.
Leonardo
-- 
ftp://warez.slashdot.com:12345
 - Warez for nerds. Stuff that matters.