Re: firewall log message question
On Wed, May 30, 2001 at 01:30:54AM -0700, deb-user@LuftHans.com wrote:
> Am 29. May, 2001 schwäzte will trillich so:
> > Security Violations
> > =-=-=-=-=-=-=-=-=-=
> > May 23 12:51:01 server kernel: Packet log: input DENY eth1 PROTO=1 192.168.1.62:3 208.33.90.85:13 L=56 S=0x00 I=30114 F=0x0000 T=248 (#5)
> > May 23 12:51:05 server kernel: Packet log: input DENY eth1 PROTO=1 192.168.1.62:3 208.33.90.85:13 L=56 S=0x00 I=30125 F=0x0000 T=248 (#5)
> > May 23 12:51:11 server kernel: Packet log: input DENY eth1 PROTO=1 192.168.1.62:3 208.33.90.85:13 L=56 S=0x00 I=30140 F=0x0000 T=248 (#5)
> > May 23 12:51:23 server kernel: Packet log: input DENY eth1 PROTO=1 192.168.1.62:3 208.33.90.85:13 L=56 S=0x00 I=30167 F=0x0000 T=248 (#5)
>
> Don't know ICMP well enough to tell you the significance of 3 and 13.
>
> Is eth1 your internal or your external interface, e.g. 192.168.1.0/24 or
> 208.33.90.85? If it's your external the packet was coming from upstream,
> e.g. your ISP connection.
ifconfig reminds me that it's 208.33.90.85, so it came from Out
There Somewhere.
> Did you ping and traceroute to 192.168.1.62 to make sure it's not out there?
all packets died. no such route, etc.
--
DEBIAN NEWBIE TIP #29 from Will Trillich <will@serensoft.com>
:
Console GIBBERISH? Suddenly you're seeing Russian or Korean or
box-like text on your console or xterm (or rxvt) -- probably
after viewing a binary file, right? :) Enter "reset" at the
command line, or try embedding a control-O (letter oh) into
your command-line prompt string:
export PS1='^V^O\u@\h: \w$ '
Also see http://newbieDoc.sourceForge.net/ ...
Reply to: