Jan 18 22:02:00 XXXXXXXX kernel: Packet log: input DENY ppp0 PROTO=17 213.122.164.171:1038 255.255.255.255:2710 L=51 S=0x00 I=9892 F=0x0000 T=64 (#33)
Can anyone tell me what these are? I'm suddenly (last few days) getting an awful lot of these firewall messages.
They are emanating from my ISP (BtInternet).
Barry Samuels
bsamuels@beenthere-donethat.org.uk wrote:
Jan 18 22:02:00 XXXXXXXX kernel: Packet log: input DENY ppp0 PROTO=17 213.122.164.171:1038 255.255.255.255:2710 L=51 S=0x00 I=9892 F=0x0000 T=64 (#33)
Can anyone tell me what these are? I'm suddenly (last few days) getting an awful lot of these firewall messages.
looks like UDP packets (protocol 17) are being blocked on your ppp0 device... you could turn off logging if the mesages are anoying/filling up disk space... the packets could be produced by any number of applications that use UDP (real player, quake etc...), they could also be produced from somebody on the internet sending udp packets to your machine.. can't really tell from that snip whether 213.122.164.171 is your machine or some other machine on btinternet...
Sz
They are emanating from my ISP (BtInternet).
Barry Samuels
main@lists.alug.org.uk http://www.anglian.lug.org.uk/ http://lists.alug.org.uk/mailman/listinfo/main Unsubscribe? See message headers or the web site above!
Jan 18 22:02:00 XXXXXXXX kernel: Packet log: input DENY ppp0
PROTO=17
213.122.164.171:1038 255.255.255.255:2710 L=51 S=0x00 I=9892
F=0x0000
T=64 (#33)
looks like UDP packets (protocol 17) are being blocked on your ppp0 device... you could turn off logging if the mesages are
anoying/filling
up disk space... the packets could be produced by any number of applications that use
UDP
(real player, quake etc...), they could also be produced from somebody on the internet sending udp packets to your machine.. can't really
tell
from that snip whether 213.122.164.171 is your machine or some other machine on btinternet...
I'm also on BTInternet and I get on average 17 of these a day. As long as your firewall has only the open ports you need (check with netstat -a) and you have the uptodate security patches then you don't need to worry too much. But as Neil says you can turn off the logging, but then I always leave them on as at least it shows the firewall is working.
Cheers
D.
-
bsamuelsļ¼ beenthere-donethat.org.uk -
David Fairey -
Neill Newman