Re: firewall log message question
On Wed, 30 May 2001, will trillich wrote:
> On Wed, May 30, 2001 at 01:30:54AM -0700, deb-user@LuftHans.com wrote:
> > Am 29. May, 2001 schwäzte will trillich so:
> > > Security Violations
> > > =-=-=-=-=-=-=-=-=-=
> > > May 23 12:51:01 server kernel: Packet log: input DENY eth1 PROTO=1 192.168.1.62:3 208.33.90.85:13 L=56 S=0x00 I=30114 F=0x0000 T=248 (#5)
> > > May 23 12:51:05 server kernel: Packet log: input DENY eth1 PROTO=1 192.168.1.62:3 208.33.90.85:13 L=56 S=0x00 I=30125 F=0x0000 T=248 (#5)
> > > May 23 12:51:11 server kernel: Packet log: input DENY eth1 PROTO=1 192.168.1.62:3 208.33.90.85:13 L=56 S=0x00 I=30140 F=0x0000 T=248 (#5)
> > > May 23 12:51:23 server kernel: Packet log: input DENY eth1 PROTO=1 192.168.1.62:3 208.33.90.85:13 L=56 S=0x00 I=30167 F=0x0000 T=248 (#5)
> >
> > Don't know ICMP well enough to tell you the significance of 3 and 13.
If I'm not mistaken and memory serves me well it was something like
this:
3 = ICMP Destination Unreachable
13 = ICMP Timestamp
HTH
Grx HdV
--
Support bacteria -
they're the only culture some people have.
J.A. de Vries aka HdV
Delft University of Technology
Computing Centre
Email: J.A.deVries@DTO.TUDelft.NL
Email: HdV@DTO.TUDelft.NL
Reply to: