I totally agree, if you set a global pinhole through to your firewall, you
will pick these ports scans up from their real internet addresses, I know,
cause Ive done it...

Aaron

-----Original Message-----
From: Pete [mailto:speed@advcomm.co.nz]
Sent: Thursday, 26 April 2001 08:50
To: adsl@unixathome.org
Subject: Re: who's portscanning my adsl router?

> You have to Understand the M1122's are NAT boxes (they translate fake ip
> addresses (internal network) into 1 real ip address (your Internet One).
> If someone port scans you it will get to the M1122 and then just stop
> (as there is nothing on the Internet side of the Router to connect to),
> it will not get to the Firewall box (and even if it did via NAT) it will
> seem to come from 192.168.1.254.

No, even if it did via NAT (because of a pin-hole for example), it would
appear
to come from the real sources's IP address. Thats the whole point of NAT and
port-forwarding.

This message is part of the NZ ADSL mailing list.
see http://unixathome.org/adsl/ for archives, FAQ,
and various documents.
To unsubscribe: send mail to majordomo@unixathome.org
with "unsubscribe adsl" in the body of the message

######################################################################
Attention:
This e-mail message is privileged and confidential. If you are not the
intended recipient please delete the message and notify the sender.
Any views or opinions presented are solely those of the author.

######################################################################

This message is part of the NZ ADSL mailing list.
see http://unixathome.org/adsl/ for archives, FAQ,
and various documents.
To unsubscribe: send mail to majordomo@unixathome.org
with "unsubscribe adsl" in the body of the message
Received on Thu May 3 16:07:05 2001