Malicious site - mis-reporting or misunderstanding?

Comments

1 comment

  • Avatar
    Firewalla

    If the alarm has "443,22,1193" in it, it is likely outsider trying to get into your system.  The block is valid. 

    If you see something is accessing inside port that's outside of your range, it could be four possibilities

    1. the port was open by UPnP

    2. a bug in the UI

    3. a bug in the accounting system, src and dst ports are reversed. 

    4. inside host is accessing site X of port 45902

     

    If this happen again, send us a email, and give us support access, we can go inside and take a look 

Please sign in to leave a comment.

Powered by Zendesk