On Mon, Jul 02, 2001 at 05:05:28PM +0100, Adam Bower wrote:
On Tue, 3 Jul 2001, Joss Winn wrote:
Jul 3 00:38:17 linux kernel: SuSE-FW-DROP-DEFAULTIN=ppp0 OUT= MAC= SRC=211.104.247.142 DST=211.2.96.188 LEN=6
What this means is a packet came in ppp0 (your modem) destined for 211.2.96.188 (your ip address) from 211.104.247.142 (or where ever)
This may have been a legitimate packet arriving out of sequence, or may have been somebody doing a malicious probe of your machine. What I would really need to tell you more what was going on would be the source port and destination port addresses, they would look something like SPT=80 DPT=50347 for example in my firewall.
The main thing about these messages is that they are a good thing in that at least your firewall appears to be doing something (whether the right thing or not I can't tell you). If you can give me some more output (maybe the output of dmesg) would help me tell you a little more.
Thanks Adam,
My dmesg is attached. I just rebooted and went online before running dmesg.
thanks for your time :-)
What I noticed about these messages is that they occur a few times each time I am online. Not constantly but very occasionaly. Sometimes it is the same src IP address.
Joss