FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Ubuntu > Ubuntu User

 
 
LinkBack Thread Tools
 
Old 02-27-2009, 04:17 AM
Vitorio Okio
 
Default network security related question

I need an explanation from somebody that knows about networking security
a bit more than I do. The question below also might be particular to my
hardware/software set.

I'm behind Linksys WRT54 router with DD-WRT v.24 on it with the router
SPI firewall enabled.

I also have Firestarter running on my Ubuntu 8.04.

I used to think that being behind a NAT router is quite safe. And I used
to think that keeping Firestarter running is my tribute to security
paranoia.

But today I've noticed a huge number of incoming connections reported
blocked by Firestarter. All of them are of ICMP protocol, and my
understanding is they are either pings, or simple port scans, or
something of the kind.

Though almost all of them come from the same 2 sources outside of my
country and this persistence worries me.

My question is how do they ever reach my Firestarter? How they go through
my NAT router? I thought they are supposed to be blocked on that level.

Am I missing something in my knowledge or my router firewall is just
doing a poor job?

Can anybody of networking gurus explain it to me, please?



--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
 

Thread Tools




All times are GMT. The time now is 07:10 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org