Hi all,
I have been tightning up the firewall rules on my mac.
And after having lashed up a quick script to generate some rules from the Black list servers have managed to block most sites, but I'm now getting steath mode connections from my NTL external IP.
i.e.
Apr 9 23:32:24 sticky ipfw: Stealth Mode connection attempt to TCP 192.168.0.116:80 from MY.EXTERNAL.IP:62285
Apr 9 23:36:27 sticky ipfw: Stealth Mode connection attempt to TCP 192.168.0.116:80 from MY.EXTERNAL.IP:62495
I'm sure it's nothing on my server, so I'm a bit confused.
This all started after someone in the taiwan started scanning and hitting my web server with spurious requests, so i decided to be a bit more proactive with my blocking.
Any ideas on where this is comming from, as I can hardly block my own IP
Thanks