Kerio, what does this log intrusion mean?

Discussion in 'other firewalls' started by Slovak, Mar 21, 2004.

Thread Status:
Not open for further replies.
  1. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    I just looked at my statistics for Kerio v4.x.x and it says two medium intrusions in the last hour, so when I look at the log it says this....
    ICMP L3retriever ping under description, and says it came from a comp in my network, reference url www.whitehats.com/info/IDS311 and the attack class was an attempted recon, medium priority, action dropped.
    What does all this mean?
     
    Slovak, Mar 21, 2004
    #1
  2. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,934
    Location:
    SW. Oklahoma
    It looks to mean when the action was dropped it blocked the intrusion. It looks as if the firewall is working.
     
    bigc73542, Mar 21, 2004
    #2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...