Re: Strange traffic on internal net (slpd insecure?)
On Fri, Feb 01, 2002 at 12:50:40PM -0600, Brian McGroarty wrote:
> I just upgraded unstable -- I believe my last upgrade was 2 weeks
> ago. I'm now getting a LOT of messages like the below...
>
> Feb 1 08:53:01 booberry kernel: Packet log: output DENY eth1 PROTO=2 192.168.0.1:65535
> +239.255.255.253:65535 L=32 S=0x00 I=0 F=0x4000 T=1 O=0x00000494 (#8)
>
> eth0 is my external interface.
> eth1 is my internal interface (on 192.168.0.1)
>
>
> Why am I suddenly getting these, where I didn't before the upgrade?
The problem seems to come from slpd -- stopping slpd makes the
warnings stop.
Why is slpd trying to send to 239.255.255.253, and why is it sending
via the wrong interface?
Reply to: