Package: iceweasel Version: 2.0.0.3-1 Severity: normal Tags: security When my iceweasel is running, I constantly get entries like those below in my firewall logs. Sometimes (not this particular time) there are also domain port (UDP 53) packets from the same sources. And yes this happens with -safe-mode as well. (1.2.3.4 is not my real IP#.)
[EMAIL PROTECTED]:~$ dig -x 63.245.213.126 ; <<>> DiG 9.3.4 <<>> -x 63.245.213.126 ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26347 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;126.213.245.63.in-addr.arpa. IN PTR ;; ANSWER SECTION: 126.213.245.63.in-addr.arpa. 3600 IN PTR gslb01.nllb.nl.mozilla.com. ;; AUTHORITY SECTION: 213.245.63.in-addr.arpa. 3600 IN NS ns1.mozilla.org. 213.245.63.in-addr.arpa. 3600 IN NS ns2.mozilla.org. ;; Query time: 257 msec ;; SERVER: 192.168.0.1#53(192.168.0.1) ;; WHEN: Fri Apr 6 13:05:58 2007 ;; MSG SIZE rcvd: 132 Apr 6 12:45:55 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=54882 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=3 Apr 6 12:45:59 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.213.101 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=236 ID=18874 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=3 Apr 6 12:46:35 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=2146 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=4 Apr 6 12:46:39 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.213.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=236 ID=20504 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=4 Apr 6 12:47:15 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=62445 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=5 Apr 6 12:47:19 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.213.101 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=236 ID=11947 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=5 Apr 6 12:47:55 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=10551 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=6 Apr 6 12:48:35 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=42254 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=7 Apr 6 12:56:51 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=46431 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=0 Apr 6 12:56:53 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.213.10 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=236 ID=15296 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=0 Apr 6 12:57:31 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=10012 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=1 Apr 6 12:57:33 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.213.101 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=236 ID=3913 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=1 Apr 6 12:58:11 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=59973 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=2 Apr 6 12:58:13 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.213.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=236 ID=55012 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=2 Apr 6 12:58:51 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=31105 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=3 Apr 6 12:58:53 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.213.10 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=236 ID=13189 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=3 Apr 6 12:59:31 localhost kernel: input-drop IN=eth0 OUT= MAC=00:04:5a:73:dc:4b:00:12:43:a9:8e:03:08:00 SRC=63.245.209.126 DST=1.2.3.4 LEN=28 TOS=0x00 PREC=0x00 TTL=246 ID=34000 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=4 -- System Information: Debian Release: 4.0 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/dash Kernel: Linux 2.6.18-11unicorn200703160124 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages iceweasel depends on: ii debianutils 2.17 Miscellaneous utilities specific t ii fontconfig 2.4.2-1.2 generic font configuration library ii libatk1.0-0 1.12.4-3 The ATK accessibility toolkit ii libc6 2.3.6.ds1-13 GNU C Library: Shared libraries ii libcairo2 1.2.4-4 The Cairo 2D vector graphics libra ii libfontconfig1 2.4.2-1.2 generic font configuration library ii libfreetype6 2.2.1-5 FreeType 2 font engine, shared lib ii libgcc1 1:4.1.1-21 GCC support library ii libglib2.0-0 2.12.4-2 The GLib library of C routines ii libgtk2.0-0 2.8.20-7 The GTK+ graphical user interface ii libjpeg62 6b-13 The Independent JPEG Group's JPEG ii libmyspell3c2 1:3.1-18 MySpell spellchecking library ii libpango1.0-0 1.14.8-5 Layout and rendering of internatio ii libpng12-0 1.2.15~beta5-1 PNG library - runtime ii libstdc++6 4.1.1-21 The GNU Standard C++ Library v3 ii libx11-6 2:1.0.3-6 X11 client-side library ii libxft2 2.1.8.2-8 FreeType-based font drawing librar ii libxinerama1 1:1.0.1-4.1 X11 Xinerama extension library ii libxp6 1:1.0.0.xsf1-1 X Printing Extension (Xprint) clie ii libxrender1 1:0.9.1-3 X Rendering Extension client libra ii libxt6 1:1.0.2-2 X11 toolkit intrinsics library ii psmisc 22.3-1 Utilities that use the proc filesy ii zlib1g 1:1.2.3-13 compression library - runtime iceweasel recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
