[PLUG] iptables firewalling...
Larry Brigman
larry.brigman at gmail.com
Tue Sep 5 17:41:45 UTC 2006
On 9/4/06, plug_0 at robinson-west.com <plug_0 at robinson-west.com> wrote:
> Here is the excerpt of interest:
>
> Sep 4 11:30:40 goose kernel: iptables INPUT u: IN=eth3 OUT=
> MAC=00:03:47:bd:6c:a8:00:00:0c:73:6a:54:08:00 SRC=17.9.186.186
> DST=209.210.202.172 LEN=715 TOS=0x00 PREC=0x00 TTL=48 ID=17852 PROTO=UDP
> SPT=45604 DPT=1025 LEN=695
> Sep 4 11:30:40 goose kernel: iptables INPUT u: IN=eth3 OUT=
> MAC=00:03:47:bd:6c:a8:00:00:0c:73:6a:54:08:00 SRC=17.9.186.186
> DST=209.210.202.172 LEN=715 TOS=0x00 PREC=0x00 TTL=48 ID=17853 PROTO=UDP
> SPT=45604 DPT=1026 LEN=695
> Sep 4 11:30:40 goose kernel: iptables INPUT u: IN=eth3 OUT=
> MAC=00:03:47:bd:6c:a8:00:00:0c:73:6a:54:08:00 SRC=17.9.186.186
> DST=209.210.202.172 LEN=715 TOS=0x00 PREC=0x00 TTL=48 ID=17855 PROTO=UDP
> SPT=45604 DPT=1028 LEN=695
> Sep 4 11:30:40 goose kernel: iptables INPUT u: IN=eth3 OUT=
> MAC=00:03:47:bd:6c:a8:00:00:0c:73:6a:54:08:00 SRC=17.9.186.186
> DST=209.210.202.172 LEN=715 TOS=0x00 PREC=0x00 TTL=48 ID=17856 PROTO=UDP
> SPT=45604 DPT=1029 LEN=695
> Sep 4 11:30:40 goose kernel: iptables INPUT u: IN=eth3 OUT=
> MAC=00:03:47:bd:6c:a8:00:00:0c:73:6a:54:08:00 SRC=17.9.186.186
> DST=209.210.202.174 LEN=715 TOS=0x00 PREC=0x00 TTL=48 ID=10446 PROTO=UDP
> SPT=45604 DPT=1025 LEN=695
>
whois 17.9.186.186
[Querying whois.arin.net]
[whois.arin.net]
OrgName: Apple Computer, Inc.
OrgID: APPLEC-3
Address: 20740 Valley Green Drive, MS32E
City: Cupertino
StateProv: CA
PostalCode: 95014
Country: US
NetRange: 17.0.0.0 - 17.255.255.255
CIDR: 17.0.0.0/8
NetName: APPLE-WWNET
NetHandle: NET-17-0-0-0-1
Parent:
NetType: Direct Assignment
NameServer: NSERVER.APPLE.COM
NameServer: NSERVER2.APPLE.COM
NameServer: NSERVER.EURO.APPLE.COM
NameServer: NSERVER.ASIA.APPLE.COM
Comment:
RegDate: 1990-04-16
Updated: 2000-05-23
RTechHandle: ZA42-ARIN
RTechName: Apple Computer, Inc.
RTechPhone: +1-408-974-7777
RTechEmail: Apple-NOC at apple.com
Someone at Apple thinks you have something of value on your machine.
More information about the PLUG
mailing list