WTF is OCSP.MIA1.VERISIGN.COM



  • can someone tell me why my pfsense/snort is calling : OCSP.MIA1.VERISIGN.COM ????

    
    6 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	37583 	-> 	199.7.51.72 	80 	119:14:1 	12/02-18:12:06
    7 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	21292 	-> 	199.7.52.72 	80 	119:14:1 	12/02-17:11:05
    8 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	6037 	-> 	199.7.51.72 	80 	119:14:1 	12/02-16:14:42
    9 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	25343 	-> 	199.7.51.72 	80 	119:14:1 	12/02-16:14:42
    10 	3 	TCP 	(http_inspect) NON-RFC DEFINED CHAR 	Prep 	192.168.10.9 	19826 	-> 	199.7.48.72 	80 	119:14:1 	12/02-16:10:51
    
    

    199.7.48.72 is OCSP.MIA1.VERISIGN.COM

    gruß dave



  • today is it….:

    1 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 13991 -> 199.7.51.72 80 119:14:1 12/03-09:25:27
    2 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 65274 -> 199.16.83.72 80 119:14:1 12/03-08:24:11
    3 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 62522 -> 199.7.71.72 80 119:14:1 12/03-07:24:10
    4 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 42667 -> 199.7.59.72 80 119:14:1 12/03-06:23:26
    5 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 51586 -> 199.7.57.72 80 119:14:1 12/03-05:22:10
    6 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 26654 -> 199.7.50.72 80 119:14:1 12/03-04:21:25
    7 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 62794 -> 199.7.50.72 80 119:14:1 12/03-03:20:09
    8 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 29531 -> 199.7.51.72 80 119:14:1 12/03-02:19:25
    9 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 60375 -> 199.7.50.72 80 119:14:1 12/03-01:19:24
    10 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 1031 -> 199.7.55.72 80 119:14:1 12/03-00:19:24
    11 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 16774 -> 199.7.59.72 80 119:14:1 12/02-23:18:08
    12 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 63748 -> 199.7.59.72 80 119:14:1 12/02-22:17:23
    13 3 TCP (http_inspect) NON-RFC DEFINED CHAR Prep 192.168.10.9 62317 -> 199.7.51.72 80 119:14:1 12/02-21:15:23

    wtf is it......recherche
    ........................................

    its always ..verisign.com
    WHAT IS IT?

    please help me out



  • aaaahhhhh is verisign from pfsense firewall ???????

    http://www.verisign.com/static/005296.pdf

    –--------

    RESULT is not a risk!!!
    its for security :D

    http://www.soft-ware.net/tipps/tipp27/Verbindung-zu-crlverisigncom-sicher.asp

    dont panic!

    CLOSED


Log in to reply