Alguem sabe me dizer o significado destas mensagens do firewall (iptables)? Elas aparecem no /var/log/messages após eu conectar a internet. Terá alguma coisa a ver com trojan/invasão/vírus?
Mar 4 02:41:40 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=138.237.174.41 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=51069 DF PROTO=TCP SPT=1397 DPT=1098 WINDOW=64240 RES=0x00 SYN URGP=0 Mar 4 02:41:44 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=138.237.174.41 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=51074 DF PROTO=TCP SPT=1397 DPT=1098 WINDOW=64240 RES=0x00 SYN URGP=0 Mar 4 02:41:49 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=138.237.174.41 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=51080 DF PROTO=TCP SPT=1397 DPT=1098 WINDOW=64240 RES=0x00 SYN URGP=0 Mar 4 02:42:03 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=138.237.174.41 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=51096 DF PROTO=TCP SPT=1400 DPT=1098 WINDOW=64240 RES=0x00 SYN URGP=0 Mar 4 02:42:05 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=138.237.174.41 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=51098 DF PROTO=TCP SPT=1400 DPT=1098 WINDOW=64240 RES=0x00 SYN URGP=0 Mar 4 02:42:12 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=138.237.174.41 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=51100 DF PROTO=TCP SPT=1400 DPT=1098 WINDOW=64240 RES=0x00 SYN URGP=0 Mar 4 02:44:49 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=172.184.218.197 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=47796 DF PROTO=TCP SPT=3919 DPT=1098 WINDOW=8160 RES=0x00 SYN URGP=0 Mar 4 02:44:52 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=172.184.218.197 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=47804 DF PROTO=TCP SPT=3919 DPT=1098 WINDOW=8160 RES=0x00 SYN URGP=0 Mar 4 02:44:57 alpha1 kernel: FIREWALL: ppp-in IN=ippp0 OUT= MAC= SRC=172.184.218.197 DST=200.231.166.104 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=47831 DF PROTO=TCP SPT=3919 DPT=1098 WINDOW=8160 RES=0x00 SYN URGP=0 Assinantes em 04/03/2003: 2236 Mensagens recebidas desde 07/01/1999: 203037 Historico e [des]cadastramento: http://linux-br.conectiva.com.br Assuntos administrativos e problemas com a lista: mailto:[EMAIL PROTECTED]
