Ramasubramanian Ramesh wrote:
top posting - iihh ugly ;-p
well, it's the netfilter code from the kernel instructed by an
iptables rule, that spits out that message.
most likely this is a message informing you about a blocked packet.
the question is: who/what set this iptables rule to tell the kernel
to discard such packets?
my cristal ball is currently somehow foggy, so I can't tell.
maybe you know what firewall frontend you are using?
what to do?
well - to prohibit logging of those packets in the short term a
rule like this may do the job:
iptables -I INPUT -i eth1 -s 192.168.1.1 -p icmp --icmp-type 8 -j DROP
for the long term:
learn how to configure your firewall frontend or iptables.
but it's you modem/router right?
so it might just check if you online. so it could be a 'good
packet', which you might want to accept. - same thing as above just
with the ACCEPT target.
best regards
Mart
My mail tool some times refuses to bottom post, especially, when I
reply to myself. I have to jump through hoops and some time it is
easier to submit to its demands :-)
Agreed. I set up the tables to drop and log messages whenever an
unsolicited message comes from outside. But, I did not think
I setup the router to send periodic pings. I guess the verizon router
(yes, it is mine because verizon gave it to me free) does that because
it is windows centric and it likes to by user friendly by inquiring
"are you there? I greet you, etc."
It may be a good packet or it may be a bad packet. I still do not want
to look at unsolicited packets. I am worried that some one from
outside can spoof as my router. I will just drop this specific packet
without logging it.
Specifically, what does icmp_type = 8 mean?
Ramesh
My bad, I googled icmp_type 8. It seems harmless and required to be
implemented. So I am going to accept.
After filtering out this one, I notice another one coming from my own
firewall and need to figure out who is sending it.
[2731831.967429] IN=eth1 OUT= MAC= SRC=192.168.1.47 DST=192.168.1.255
LEN=233 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=138 DPT=138 LEN=213
I think this from my nmbd on the outgoing port. I am going to
investigate interfaces option in smb.conf. Please tell me if I am on the
wrong path.
Ramesh
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4c526491.20...@verizon.net