  blugirl Premium join:2002-11-05 Stanton, CA
| Port scans by my ISPs DNS?
On my SonicWALL firewall log, I see dropped port scans with the source IP showing as my ISPs DNS server. Is this kosher? Is this ok, or possibly a IP spoof when scanning our ports?
Thanks again for all the great feedback!  -- Don't be irreplaceable, if you can't be replaced, you can't be promoted. |
|
  dgilbert Good Bye My Friend Premium,MVM join:2002-06-15 none clubs: | see »Security »Why is my ISP's nameserver scanning/attacking me? for an explanation. it is really nothing to worry about. -- Technical Support....Doesn't |
|
 efflandt
join:2002-01-25 Elgin, IL | reply to blugirl One time after downloading IRS forms, I was getting traffic from their nameservers periodically for days. Not sure what that was about (maybe they had been exploited). I finally had enough of that and disconnected to get a different dynamic IP. |
|