Hi, recently my outpost firewall started detecting the following apart from other stuff: - Block IN UDP 0.0.0.0 68 255.255.255.255 67 Packet to closed port this multiple times and - Block IN Ethernet (an unknown mac adress) ff-ff-ff-ff-ff-ff Blocked by the Attack Detecton component Is this normal, shall i be concerned? Thank you I have the attack detection set to max. I use the modem/router supplied by the isp. Also i installed xarp today and not unusuall stuff reported.
Both your BLOCKED entries are totally normal in the packet log. Outpost sees and reports everything. I see them too. Unknown mac address - if not any of your devices (computers, TVs, other gadgets) - really should not be broadcasting on your network, so recheck what the router sees. But since Outpost blocks it, it should be no issue. Are you familiar with the Agnitum Outpost forum? http://www.outpostfirewall.com/forum/forum.php
