Ok, I made the change

ignore tcp tcp.source=tcp.ipp

ignore tcp tcp.dest=tcp.ipp

and still the link comes up.? here is how I define ipp in /etc/services:
ipp ? ? ? ? ? ? 631/udp ? ? ? ? ipp ? ? ? ? ? ? # cupsd PrintPro
ipp ? ? ? ? ? ? 631/tcp ?? ? ? ? ipp ? ? ? ? ? ? # cupsd PrintPro

I was originally definining it like: ipp ?? 631/tcp ?? cupsd ?? #
but since the link came up I changed it refer only to ipp only and added 
the udp definition.

Netstat shows that port 631 is bound by 'ipp', so the change to 
/etc/services has taken effect. I duplicated the port631 binding for udp 
in /etc/services and there is a corresponding pair of rules in 
phone.filter.?
Here is the message from diald about the trigger:
Apr 20 16:08:32 localhost diald[1529]: Trigger: udp ?? ? ? ? 
10.0.0.1/631 ?? 255.255.255.255/631

There is a huge amount of garbage produced by diald on startup--which I 
have yet to figure out the origin of (hopefully it's caused by Cups):

Apr 20 16:08:25 localhost diald[1528]: prule parsing error. Got token 
'tcp'. Rul?
e name already defined.
Apr 20 16:08:25 localhost diald[1528]: parse string: 'tcp tcp 
9:12:13:14:15:16:1?
7:18:19:+0:+1:+2:+3:9:9:9'
Apr 20 16:08:25 localhost diald[1528]: prule parsing error. Got token 
'udp'. Rul?
e name already defined.
Apr 20 16:08:25 localhost diald[1528]: parse string: 'udp udp 
9:12:13:14:15:16:1?
7:18:19:+0:+1:+2:+3:9:9:9'
Apr 20 16:08:25 localhost diald[1528]: prule parsing error. Got token 
'icmp'. Ru?
le name already defined.
Apr 20 16:08:25 localhost diald[1528]: parse string: 'icmp icmp 
9:12:13:14:15:16?
:17:18:19:9:9:9:9:9:9:9'
Apr 20 16:08:25 localhost diald[1528]: prule parsing error. Got token 
'any'. Rul?
e name already defined.
Apr 20 16:08:25 localhost diald[1528]: parse string: 'any any 
9:12:13:14:15:16:1?
7:18:19:9:9:9:9:9:9:9'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.ihl'. Ex?
pecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.ihl 0(24)&0xf'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.version'?
. Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.version 0(28)&0xf'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.tos'. Ex?
pecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.tos 1(24)&0xff'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.tot_len'?
. Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.tot_len 
2(16)&0xffff'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.id'. Exp?
ecting a new variable nameApr 20 16:08:25 localhost diald[1528]: var 
parsing error. Got token 'ip.ttl'. Ex?
pecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.ttl 8(24)&0xff'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.protocol?
'. Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.protocol 
9(24)&0xff'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.check'. ?
Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.check 
10(16)&0xffff'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.saddr'. ?
Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.saddr 12'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'ip.daddr'. ?
Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'ip.daddr 16'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'tcp.source'?
. Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'tcp.source 
+0(16)&0xffff'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'tcp.dest'. ?
Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'tcp.dest 
+2(16)&0xffff'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'tcp.seq'. E?
xpecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'tcp.seq +4'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'tcp.ack_seq?
'. Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'tcp.ack_seq +8'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'tcp.doff'. ?
Expecting a new variable name
Apr 20 16:08:25 localhost diald[1528]: parse string: 'tcp.doff +12(28)&0xf'
Apr 20 16:08:25 localhost diald[1528]: var parsing error. Got token 
'tcp.fin'. E?
xpecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'tcp.fin +13(24)&0x1'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'tcp.syn'. E?
xpecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'tcp.syn +13(25)&0x1'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'tcp.rst'. E?
xpecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'tcp.rst +13(26)&0x1'

Apr 20 16:08:26 localhost diald[1528]: parse string: 'tcp.psh +13(27)&0x1'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'tcp.ack'. E?
xpecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'tcp.ack +13(28)&0x1'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'tcp.urg'. E?
xpecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'tcp.urg +13(29)&0x1'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'tcp.live'. ?
Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'tcp.live +127'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'udp.source'?
. Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'udp.source 
+0(16)&0xffff'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'udp.dest'. ?
Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'udp.dest 
+2(16)&0xffff'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'udp.len'. E?
xpecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'udp.len +4(16)&0xffff'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'udp.check'.?
Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'udp.check 
+6(16)&0xffff'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'icmp.type'.?
Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'icmp.type +0(24)&0xff'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'icmp.code'.?
Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'icmp.code +1(24)&0xff'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'icmp.checks?
um'. Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'icmp.checksum 
+2(16)&0xfff?
f'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'icmp.echo.i?
d'. Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'icmp.echo.id 
+4(16)&0xffff?
'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'icmp.echo.s?
equence'. Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'icmp.echo.sequence 
+6(16)&?
0xffff'
Apr 20 16:08:26 localhost diald[1528]: var parsing error. Got token 
'icmp.gatewa?
y'. Expecting a new variable name
Apr 20 16:08:26 localhost diald[1528]: parse string: 'icmp.gateway +4'
Apr 20 16:08:26 localhost diald[1528]: Unknown option 'up-delay'
-------------------------------------------------------------
Any body have an idea about how I can stop this thing?
Thank You,
hazzmat

Jeff Licquia wrote:
> 
> On Tue, Apr 18, 2000 at 12:13:58PM -0400, hazzmat wrote:
> 
> > ?? Hello,
> 
> > ?? ? ? ? ? I use CUPSD for my printer and it brings up my PPP connection 
> 
> > through diald since it listens on port 631 (Internet Printer Protocol). 
> 
> > I have tried to block this by defining 631 as "ipp" in /etc/services and 
> 
> > adding the lines:
> 
> > ignore tcp tcp.source=ipp
> 
> > ignore tcp tcp.dest=ipp
> 
> 
> 
> This should likely be:
> 
> 
> 
> ignore tcp tcp.source=tcp.ipp
> 
> ignore tcp tcp.dest=tcp.ipp
> 
> 
> 
> 
> 



-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]

Reply via email to