What can this pfirewall.log tell me?

[Gray]

Hi,
I've been trying to find out whether the numerous
entries of...

2004-04-04 10:28:13 DROP TCP ...etc...

....can tell me anything useful.

Less often it's DROP UDP, and very occasionally it'; DROP
ICMP. I know what the IP addresses are, and a pretty
good idea roughly where most of them originate.

But do I need to be worried by these entries? IS someone
trying to breach my firewall?

Any help would be much appriated,
Gray

 

[$eSnail3000]

But do I need to be worried by these entries? IS someone

trying to breach my firewall?

Firewall is designed to allow and block traffic. You will always have
entries for blocked traffic. Windows firewall, and even Microsoft ISA
server, ara bad choices to protect your system or network. In most cases
you need to run another firewall to protect Microsoft's firewall. My
favorite firewall is VisNetic, www.deerfield.com. Some people like
ZoneAlarm. Those are much more powerful, easier to setup, administer, and
monitor.


AL

 

[Guest]

Thank you Al, I must admit I didn't know that the Windows
Firewall is not well regarded. I shall take your advice.