Thanks, that fixed the problem!
Is there anywhere I should be looking for help like this besides the bering
user guide & bering install guide?

-Mark Ivey-

----- Original Message -----
From: "Tom Eastep" <[EMAIL PROTECTED]>
To: "Mark Ivey" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, August 21, 2002 6:46 AM
Subject: Re: [leaf-user] Bering 1.0 rc3: lots of rejected packets coming
from firewall?


> On Tue, 20 Aug 2002, Mark Ivey wrote:
>
> > I just set up Bering 1.0 rc3, and I'm seeing lots (1500 the first day)
of
> > rejected packets.  A vast majority of these are coming from my firewall.
I
> > followed the user guide & installation guide when I set it up, and so I
went
> > back to double check that I didn't miss a step.  I've also tried doing
some
> > searches to figure out what these are and how to stop them, but the only
> > thing I've come up with is that it may have to do with dhcp.  Can
someone
> > tell me where to look?  Or what the problem is?
> >
> > Here is the info from the weblet (by port):
> > hits      port    Service
> > 834     68      bootpc
> > 668     67      bootps
> >
> > Here is the info from the weblet (by ipaddress):
> > Hits      IP-Adress              Date
> > 834      192.168.1.254       Aug 20
> > 586      192.168.1.4           Aug 20
> >
> > Here is a sample of the entries from the log:
> > Aug 20 08:26:32 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1
> > SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64
ID=38775
> > DF PROTO=UDP SPT=67 DPT=68 LEN=308
> >
> > Aug 20 08:27:36 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1
> > SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64
ID=7128
> > DF PROTO=UDP SPT=67 DPT=68 LEN=308
> >
> > Aug 20 08:28:40 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1
> > SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64
ID=25531
> > DF PROTO=UDP SPT=67 DPT=68 LEN=308
> >
>
> Set the 'dhcp' option on eth1 in /etc/shorewall/interfaces!!!
>
> -Tom
> --
> Tom Eastep    \ Shorewall - iptables made easy
> AIM: tmeastep  \ http://www.shorewall.net
> ICQ: #60745924  \ [EMAIL PROTECTED]
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
> ------------------------------------------------------------------------
> leaf-user mailing list: [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to