Our home lan runs through a router/firewall.
I was browsing the router's logs and found this:
INF 2010-10-10T09:46:36-07:00 fw,fwmon src=192.168.1.3 dst=10.64.36.31
ipprot=6 sport=2588 dport=80 Drop traffic to 10.0.0.0/8
The thing is, I have no 10. on my LAN.
My LAN is all 192.168.1.X, (class C).
Why would a windows machine broadcast this packet to
http server port ports at all 10.0.0.0/8 machines?
Is it an indication that the windows pc is/might be infected?
Thanks for your help.
JD
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
