WTF is OCSP.MIA1.VERISIGN.COM

onkeldave83

can someone tell me why my pfsense/snort is calling : OCSP.MIA1.VERISIGN.COM ????


6 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	37583 	-> 	199.7.51.72 	80 	119:14:1 	12/02-18:12:06
7 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	21292 	-> 	199.7.52.72 	80 	119:14:1 	12/02-17:11:05
8 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	6037 	-> 	199.7.51.72 	80 	119:14:1 	12/02-16:14:42
9 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	25343 	-> 	199.7.51.72 	80 	119:14:1 	12/02-16:14:42
10 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	19826 	-> 	199.7.48.72 	80 	119:14:1 	12/02-16:10:51

199.7.48.72 is OCSP.MIA1.VERISIGN.COM

gruß dave

onkeldave83

today is it….:

1 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 13991 -> 199.7.51.72 80 119:14:1 12/03-09:25:27
2 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 65274 -> 199.16.83.72 80 119:14:1 12/03-08:24:11
3 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 62522 -> 199.7.71.72 80 119:14:1 12/03-07:24:10
4 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 42667 -> 199.7.59.72 80 119:14:1 12/03-06:23:26
5 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 51586 -> 199.7.57.72 80 119:14:1 12/03-05:22:10
6 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 26654 -> 199.7.50.72 80 119:14:1 12/03-04:21:25
7 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 62794 -> 199.7.50.72 80 119:14:1 12/03-03:20:09
8 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 29531 -> 199.7.51.72 80 119:14:1 12/03-02:19:25
9 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 60375 -> 199.7.50.72 80 119:14:1 12/03-01:19:24
10 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 1031 -> 199.7.55.72 80 119:14:1 12/03-00:19:24
11 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 16774 -> 199.7.59.72 80 119:14:1 12/02-23:18:08
12 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 63748 -> 199.7.59.72 80 119:14:1 12/02-22:17:23
13 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 62317 -> 199.7.51.72 80 119:14:1 12/02-21:15:23

wtf is it......recherche
........................................

its always ..verisign.com
WHAT IS IT?

please help me out

onkeldave83

aaaahhhhh is verisign from pfsense firewall ???????

http://www.verisign.com/static/005296.pdf

–--------

RESULT is not a risk!!!
its for security :D

http://www.soft-ware.net/tipps/tipp27/Verbindung-zu-crlverisigncom-sicher.asp

dont panic!

CLOSED