I visit an internet discussion board where some host their avatar images (and web bugs) where they have server log access. So I have blocked the url in the firewall to one of those sites, the IP of that site is 81.231.66.57 I have put spaces and XXXX in the URL below to break the hot link.

The URL logs "blocked" but a few minutes later there are incoming hits from the blocked site. Here are the logs showing this;

  

8-Nov-08 17:27:10 Inbound Dropped (by default policy) 81.231.66.57 80	
192.168.1.7 (ZoneAlarm Z100G)	TCP 34150	Policy rule 15 WAN (Internet)
	
8-Nov-08 17:26:50 Inbound Dropped (by default policy) 81.231.66.57 80	
192.168.1.7 (ZoneAlarm Z100G)	TCP 34144	Policy rule 15 WAN (Internet)	
	
8-Nov-08 17:25:02 Outbound URL Blocked 192.168.10.157 2466 81.231.66.57
TCP 80 (HTTP) Web rule 9 LAN	URL: www . anotherXXXX . net/me.jpg

8-Nov-08 17:24:40 Outbound URL Blocked 192.168.10.157 2457 81.231.66.57
TCP 80 (HTTP) Web rule 9 LAN	URL: www . anotherXXXX . net/me.jpg

8-Nov-08 17:23:10 Inbound Dropped (by default policy) 81.231.66.57 80
192.168.1.7 (ZoneAlarm Z100G)	TCP 34121	Policy rule 15 WAN (Internet)	

8-Nov-08 17:21:08 Inbound Dropped (by default policy) 209.17.73.10 80
192.168.1.7 (ZoneAlarm Z100G)	TCP 34125	TCP out of state 0 WAN (Internet)
	
8-Nov-08 17:21:04 Outbound URL Blocked 192.168.10.157 2437 81.231.66.57
TCP 80 (HTTP) Web rule 9 LAN URL: www . anotherXXXX . net/me.jpg

Does anyone know what that incoming means? I don't see that kind of ping back or whatever it is on any other site I visit.

Thanks,
Jesse

This message has been edited. Last edited by: Jesse,