sgs 5420

[herr_davis]

error message in sgs log file:

"sending icmp unreachable, ip code=unrechable (port), source ip=xxx.xxx.xxx.xxx, host=xxx.xxx.xxx, destination ip=xxx.xxx.xxx.xxx, ip code=udp, source port=123, destination port=123, adapter=eth0"

what can I do?

 

[Byteman]

sgs 5420

I may be having a moment here, but... what's exactly is that?,... firewall software? which one? , router based firewall log?

 

[Byteman]

ok,... found it myself, its a Symantec Enterprise class security gateway (expensive), description:

Symantec Gateway Security Appliance 5400 Series combines firewall protection with intrusion detection and prevention, anti-spam, virus protection, content filtering, and VPN technologies.

So your at a company, this is on your network, and your getting these errors from the log file that it emails you automatically (among all the standard "port scan attack" messages)? Correct?

 

[Byteman]

port 123 is the ntp protocol, (Network Time Protocol). Try configuring your time stamp on the sg 5420 and see if it gets happy.

PS, this one should have been posted in the Networking forum...