> From: A Computer User
> Sent: June 7, 2006
> To: Ask Leo!
> Subject:
>
> Leo,
> Hi Leo: In reading my Mac Firewall log I want to know what
> does the following two entries mean:
>
> "Deny TCP yyy.yyy.yyy.yyy:3877 xxx.xxx.xxx.xxx:22 in via en0, as well as
> Stealth Mode connection attempt to UDP
>
> Do you know?

Someone's trying to connect to your computer :-).

xxx.xxx.xxx.xxx you sent me is your IP address, and "22" is
the port used for certain remote access programs. yyy.yyy.yyy.yyy
is the IP address of the computer attempting to connect to you.

I doubt that they're trying to connect to you *specifically*.
It's more likely that they're just scanning all IP addresses
in a range to see who's not protected by a firewall, and for
those that aren't, they try to login.

THAT is why you want a firewall :-).


Thanks for asking,

Leo