"Admin" <admin@eregion.de> wrote:

me, too.... Got portscans every weekend, and guess from where? ftp.suse.com! exactly the same time I do some wget on ftp.suse.com, I get portscanned by their ftp server! here's the log:

Feb 13 19:17:30 aragorn scanlogd: From 209.144.167.150:20 to 192.168.238.3 ports 3021, 3022, 3023, 3024, 3025, 3026, 3027, 3028, 3029,..., flags ??r??u, TOS 08, TTL 49, started at 19:17:15

In the situation you describe you can be sure this is *not* a portscan. Your FTP data connections trigger this warning. Eilert -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Eilert Brinkmann -- Universitaet Bremen -- FB 3, Informatik eilert@informatik.uni-bremen.de - eilert@tzi.org - eilert@linuxfreak.com http://www.informatik.uni-bremen.de/~eilert/