[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: my isp is being told *i* am broadcasting spam?



will trillich wrote:
> 

[ snip ]

> when i first set up ipCop (ipcop.org) i got about 18mb of
> logfile in one afternoon from the default firewall logging rules
> (via ipchains on potato):
> 
> Apr  2 12:18:41 troll kernel: Packet log: input - eth1 PROTO=89 63.64.14.221:65535 224.0.0.5:65535 L=64 S=0x00 I=21723 F=0x0000 T=1 (#8)
> Apr  2 12:18:41 troll kernel: Packet log: input - eth1 PROTO=89 63.110.253.177:65535 224.0.0.5:65535 L=64 S=0x00 I=21731 F=0x0000 T= 1 (#8)
> Apr  2 12:18:41 troll kernel: Packet log: input - eth1 PROTO=89 63.121.237.41:65535 224.0.0.5:65535 L=64 S=0x00 I=21743 F=0x0000 T=1 (#8)
> Apr  2 12:18:41 troll kernel: Packet log: input - eth1 PROTO=89 65.195.103.241:65535 224.0.0.5:65535 L=64 S=0x00 I=21747 F=0x0000 T= 1 (#8)
> Apr  2 12:18:41 troll kernel: Packet log: input - eth1 PROTO=89 65.195.98.249:65535 224.0.0.5:65535 L=64 S=0x00 I=21753 F=0x0000 T=1 (#8)
> 
> hundreds upon thousands of those, from the moment the firewall
> (ipcop v0.1.1) came up. to keep from sucking up all available
> space, i deleted the final (reject-and-log) rule of the incoming
> ruleset...

[ snip ]

Look here:

	<http://www.iana.org/assignments/protocol-numbers>

Notice, protocol 89:

	``89   OSPFIGP   OSPFIGP   [RFC1583,JTM4]''

This is router jabber and, although it is impinging on your bandwidth,
is otherwise harmless and safe to be ignored.

This in no way comments on anything else you are experiencing . . .

-- 

Best Regards,

mds
mds resource
888.250.3987

Dare to fix things before they break . . .

Our capacity for understanding is inversely proportional to how much we
think we know.  The more I know, the more I know I don't know . . .


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: