Re: [expert] I Found my Martians
On September 1993 plus 3577 days Sridhar Dhanapalan wrote: > The list server has exhibited all sorts of sporadic problems for as long as I've > been a member (since early 2000). Are they still using Sympa? Mailman seems to > be norm for most newer lists. All mandrake mailing lists that aren't maintained by Vincent (ie. those that aren't on mandrakesecure.com) use sympa...and whoever decided that should be shot, IMNSHO. Vox -- Think of the Linux community as a niche economy isolated by its beliefs. Kind of like the Amish, except that our religion requires us to use _higher_ technology than everyone else. -- Donald B. Marti Jr. pgp0.pgp Description: PGP signature
Re: [expert] I Found my Martians
On Wed, 2003-06-18 at 07:17, Pierre Fortin wrote: > On Wed, 18 Jun 2003 07:55:41 +0100 Anne Wilson <[EMAIL PROTECTED]> > wrote: > > > Oops - another example of seeing the reply to a message that never > > came through - I never got Sridhar's. Are we all having this > > problem? > > > > Anne > > Hmmm... too bad we don't have access to the list servers... missing > posts and duplicated posts -- gotta wonder if one of the servers has a > glitch where it forwards the wrong msg at times... > The servers went down sometime around 3:18AM 06/18 and didn't get back up until about 45 minutes ago. --LX -- Kernel 2.4.21-0.13mdk Linux Mandrake 9.1 Enlightenment-0.16.5-12mdk Evolution 1.2.4-1.1mdk Linux User #268899 http://counter.li.org/ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
The list server has exhibited all sorts of sporadic problems for as long as I've
been a member (since early 2000). Are they still using Sympa? Mailman seems to
be norm for most newer lists.
On Wed, 18 Jun 2003 00:14:58 -0700, eric huff <[EMAIL PROTECTED]> wrote:
> Ok, now i know i am not going crazier. I have seen this, too, Anne.
> I was about to look into wether it was my isp.
>
> Whenever this has happened, sure enough it's in the archive, and
> obviously some people got it, but i didn't.
>
> I'm glad you mentioned it. How would we go about trying to get the
> list server fixxed, in the case of a drastic problem?
>
> eric
>
> > Oops - another example of seeing the reply to a message that
> > never came through - I never got Sridhar's. Are we all having
> > this problem?
> >
> > Anne
--
Sridhar Dhanapalan [Yama | http://www.pclinuxonline.com/]
{PGP/GnuPG: http://dhanapalan.com/yama.asc
049D38B4 | A7A9 8A02 78CB AB1B FCE4 EEC6 2DD9 249B 049D 38B4}
Boycott shampoo! Demand REAL poo!
pgp0.pgp
Description: PGP signature
Re: [expert] I Found my Martians
On Wed, 18 Jun 2003 07:55:41 +0100 Anne Wilson <[EMAIL PROTECTED]> wrote: > Oops - another example of seeing the reply to a message that never > came through - I never got Sridhar's. Are we all having this > problem? > > Anne Hmmm... too bad we don't have access to the list servers... missing posts and duplicated posts -- gotta wonder if one of the servers has a glitch where it forwards the wrong msg at times... Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
Ok, now i know i am not going crazier. I have seen this, too, Anne. I was about to look into wether it was my isp. Whenever this has happened, sure enough it's in the archive, and obviously some people got it, but i didn't. I'm glad you mentioned it. How would we go about trying to get the list server fixxed, in the case of a drastic problem? eric > Oops - another example of seeing the reply to a message that > never came through - I never got Sridhar's. Are we all having > this problem? > > Anne Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
On Wednesday 18 Jun 2003 2:29 am, James Sparenberg wrote: > On Tue, 2003-06-17 at 16:19, Sridhar Dhanapalan wrote: > > I had an experience with martians recently. I was getting > > connection attempts from 192.168.100.1. I initially told my > > firewall to block all invalid addresses, but a day later I > > discovered that it was my cable modem (Motorola Surfboard > > SB3100). The device had a full Web configuration interface and > > its own DHCP server, and I only discovered this three years after > > buying it! > > > > I'm not slow, I'm just fashionably late! :) > >Reason number 512 on we at least looking at the instructions > might be worthwhile *large evil grin* > > James Oops - another example of seeing the reply to a message that never came through - I never got Sridhar's. Are we all having this problem? Anne Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
On Tuesday 17 Jun 2003 11:52 pm, Vox wrote: > Actually, that's only part of the whole thing :) A martian packet > is one that comes from a network that shouldn't be sending packets > to that interface. If you get a packet from 192.168.1.54 on your > public (ie. internet) interface, it'll get marked as martian > because a packet from a private interface shouldn't come to the > public interface. Same happens with improper headers without > identifying source...they get marked as martians because the > interface can't confirm it comes from a valid source. > Thanks, Vox. It all helps the understanding Anne Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians [OT]
On Tuesday 17 June 2003 12:48 pm, Anne Wilson wrote: > When the important problem-solving is over - (whisper) could someone > explain to me about martians? > > Anne It's what happens to those who don't wear tinfoil hats. -- cmg Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
On Tue, 2003-06-17 at 16:19, Sridhar Dhanapalan wrote: > On Tue, 17 Jun 2003 17:52:17 -0500, Vox <[EMAIL PROTECTED]> wrote: > > On September 1993 plus 3576 days Greg Meyer wrote: > > > > > On Tuesday 17 June 2003 12:48 pm, Anne Wilson wrote: > > >> When the important problem-solving is over - (whisper) could someone > > >> explain to me about martians? > > > > > > Sure Anne, they are little green men that come from the planet Mars :-D. > > > > > > Seriously though, my understanding is that they are tcp packets that appear > > > to have no sender. In other words, they have come from nowhere, yet they > > > are everywhere. Some device sends out a packet with an improperly > > > configured header which does not identify the source. > > > > Actually, that's only part of the whole thing :) A martian packet is > > one that comes from a network that shouldn't be sending packets to > > that interface. If you get a packet from 192.168.1.54 on your public > > (ie. internet) interface, it'll get marked as martian because a > > packet from a private interface shouldn't come to the public > > interface. Same happens with improper headers without identifying > > source...they get marked as martians because the interface can't > > confirm it comes from a valid source. > > > > Vox > > I had an experience with martians recently. I was getting connection attempts > from 192.168.100.1. I initially told my firewall to block all invalid addresses, > but a day later I discovered that it was my cable modem (Motorola Surfboard > SB3100). The device had a full Web configuration interface and its own DHCP > server, and I only discovered this three years after buying it! > > I'm not slow, I'm just fashionably late! :) Reason number 512 on we at least looking at the instructions might be worthwhile *large evil grin* James Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
On Tue, 17 Jun 2003 17:52:17 -0500, Vox <[EMAIL PROTECTED]> wrote:
> On September 1993 plus 3576 days Greg Meyer wrote:
>
> > On Tuesday 17 June 2003 12:48 pm, Anne Wilson wrote:
> >> When the important problem-solving is over - (whisper) could someone
> >> explain to me about martians?
> >
> > Sure Anne, they are little green men that come from the planet Mars :-D.
> >
> > Seriously though, my understanding is that they are tcp packets that appear
> > to have no sender. In other words, they have come from nowhere, yet they
> > are everywhere. Some device sends out a packet with an improperly
> > configured header which does not identify the source.
>
> Actually, that's only part of the whole thing :) A martian packet is
> one that comes from a network that shouldn't be sending packets to
> that interface. If you get a packet from 192.168.1.54 on your public
> (ie. internet) interface, it'll get marked as martian because a
> packet from a private interface shouldn't come to the public
> interface. Same happens with improper headers without identifying
> source...they get marked as martians because the interface can't
> confirm it comes from a valid source.
>
> Vox
I had an experience with martians recently. I was getting connection attempts
from 192.168.100.1. I initially told my firewall to block all invalid addresses,
but a day later I discovered that it was my cable modem (Motorola Surfboard
SB3100). The device had a full Web configuration interface and its own DHCP
server, and I only discovered this three years after buying it!
I'm not slow, I'm just fashionably late! :)
--
Sridhar Dhanapalan [Yama | http://www.pclinuxonline.com/]
{PGP/GnuPG: http://dhanapalan.com/yama.asc
049D38B4 | A7A9 8A02 78CB AB1B FCE4 EEC6 2DD9 249B 049D 38B4}
"And I have to say that I absolutely despise the BSD people...
Oh, well. Not everybody can be as goodlooking as me. It's a curse."
-- Linus Torvalds
pgp0.pgp
Description: PGP signature
Re: [expert] I Found my Martians
On September 1993 plus 3576 days Greg Meyer wrote: > On Tuesday 17 June 2003 12:48 pm, Anne Wilson wrote: >> When the important problem-solving is over - (whisper) could someone >> explain to me about martians? > > Sure Anne, they are little green men that come from the planet Mars :-D. > > Seriously though, my understanding is that they are tcp packets that appear to > have no sender. In other words, they have come from nowhere, yet they are > everywhere. Some device sends out a packet with an improperly configured > header which does not identify the source. Actually, that's only part of the whole thing :) A martian packet is one that comes from a network that shouldn't be sending packets to that interface. If you get a packet from 192.168.1.54 on your public (ie. internet) interface, it'll get marked as martian because a packet from a private interface shouldn't come to the public interface. Same happens with improper headers without identifying source...they get marked as martians because the interface can't confirm it comes from a valid source. Vox -- Think of the Linux community as a niche economy isolated by its beliefs. Kind of like the Amish, except that our religion requires us to use _higher_ technology than everyone else. -- Donald B. Marti Jr. pgp0.pgp Description: PGP signature
Re: [expert] I Found my Martians
On Tuesday 17 Jun 2003 6:47 pm, Greg Meyer wrote: > On Tuesday 17 June 2003 12:48 pm, Anne Wilson wrote: > > When the important problem-solving is over - (whisper) could > > someone explain to me about martians? > > Sure Anne, they are little green men that come from the planet Mars > :-D. > :-P > Seriously though, my understanding is that they are tcp packets > that appear to have no sender. In other words, they have come from > nowhere, yet they are everywhere. Some device sends out a packet > with an improperly configured header which does not identify the > source. Ah - that makes sense. Thank you Anne Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
On Tuesday 17 Jun 2003 4:47 pm, Greg Meyer wrote: > On Tuesday 17 June 2003 11:11 am, Alan Wilter Sousa da Silva wrote: > > I'm getting martians on my box : > > > > martian source 255.255.255.255 from 127.0.0.1, on dev eth0 > > > > my ifconfig is: > > I found this in my /etc/sysconfig/networking/ifcfg-lo file > # If you're having problems with gated making 127.0.0.0/8 a > martian, # you can change this to something else (255.255.255.255, > for example) > > Perhaps this helps. When the important problem-solving is over - (whisper) could someone explain to me about martians? Anne Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
On Tuesday 17 June 2003 11:11 am, Alan Wilter Sousa da Silva wrote: > I'm getting martians on my box : > > martian source 255.255.255.255 from 127.0.0.1, on dev eth0 > > my ifconfig is: I found this in my /etc/sysconfig/networking/ifcfg-lo file # If you're having problems with gated making 127.0.0.0/8 a martian, # you can change this to something else (255.255.255.255, for example) Perhaps this helps. -- Greg Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
I'm getting martians on my box : martian source 255.255.255.255 from 127.0.0.1, on dev eth0 my ifconfig is: eth0 Link encap:Ethernet HWaddr 00:E0:18:E5:70:46 inet addr:xxx.xxx.76.138 Bcast:xxx.xxx.76.255 Mask:255.255.255.0 EtherTalk Phase 2 addr:65280/232 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1862164 errors:0 dropped:0 overruns:0 frame:0 TX packets:827069 errors:0 dropped:0 overruns:0 carrier:429430 collisions:0 RX bytes:1516624543 (1446.3 Mb) TX bytes:232470269 (221.7 Mb) eth0:1Link encap:Ethernet HWaddr 00:E0:18:E5:70:46 inet addr:192.168.0.10 Bcast:192.168.0.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 loLink encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 EtherTalk Phase 2 addr:0/0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:179265 errors:0 dropped:0 overruns:0 frame:0 TX packets:179265 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 RX bytes:176217972 (168.0 Mb) TX bytes:176217972 (168.0 Mb) I cannot find /etc/security/msec/level.local ! Any help?! TIA Cheers, On Tue, 17 Jun 2003, Greg Meyer wrote: > On Tuesday 17 June 2003 09:32 am, Mark Watts wrote: > > > Now to figure out how to either get my machine to ignore them, or get the > > > print server to stop sending them. > > > > echo "enable_log_strange_packets(no)" >> /etc/security/msec/level.local && > > /etc/cron.hourly/msec > > Thanks Mark. You just saved me some time and trouble. > -- --- Alan Wilter S. da Silva --- Laboratório de Física Biológica Instituto de Biofísica Carlos Chagas Filho Universidade do Brasil/UFRJ Rio de Janeiro, Brasil Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
On Tuesday 17 June 2003 09:32 am, Mark Watts wrote: > > Now to figure out how to either get my machine to ignore them, or get the > > print server to stop sending them. > > echo "enable_log_strange_packets(no)" >> /etc/security/msec/level.local && > /etc/cron.hourly/msec Thanks Mark. You just saved me some time and trouble. -- Greg Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] I Found my Martians
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Well, it looks like I found the device that was sending out the martians > headers. It is the Netgear print server I picked up el cheapo at CompUSA. > It sets up an smb share for my HP1100A so I don't require that a particular > machine is on in order to use it. > > I discovered this by unplugging the network cable for awhile and seeing the > martian headers messages stop hitting my logs. > > Now to figure out how to either get my machine to ignore them, or get the > print server to stop sending them. echo "enable_log_strange_packets(no)" >> /etc/security/msec/level.local && /etc/cron.hourly/msec Mark. - -- Mark Watts Senior Systems Engineer QinetiQ TIM St Andrews Road, Malvern GPG Public Key ID: 455420ED -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+7xhUBn4EFUVUIO0RAqlqAJ9wIWgcxS4vp+DODuojUNP1Ni4fNQCdFziF SjTwyRwHZxJ9trSNe4LIydQ= =GxJH -END PGP SIGNATURE- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] I Found my Martians
Well, it looks like I found the device that was sending out the martians headers. It is the Netgear print server I picked up el cheapo at CompUSA. It sets up an smb share for my HP1100A so I don't require that a particular machine is on in order to use it. I discovered this by unplugging the network cable for awhile and seeing the martian headers messages stop hitting my logs. Now to figure out how to either get my machine to ignore them, or get the print server to stop sending them. -- Greg Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
