Re: UDP Port 0 not blockable
On Wed, May 14, 2003 at 09:56:22AM +0200, Andres Taylor wrote:
> Hi folks!
>
> I have this weird problem. Every 5 minutes, someone is sending me one or
> two strange packets.
>
> Snort logs it like this:
> 05/14-09:47:30.457304 [**] [1:525:4] BAD TRAFFIC udp port 0 traffic
> [**] [Classification: Misc activity] [Priority: 3] {UDP} x.x.x.x:411 ->
> y.y.y.y:0
>
> Now the weird problem is that I can't for my life block these packets!
> I've tried blocking them like this:
> iptables -I INPUT -s y.y.y.y -j DROP
Maybe
iptables -I INPUT -m state --state INVALID -j DROP
IŽm not sure, just trying
Best regards
--
Celso González
http://bulmalug.net
Reply to: