Dsculpen que los moleste pero estoy recibiendo en forma permanente mensajes de paquetes dropeados y me gustaría saber si a alguien se le ocurre de que son y con que regla filtrarlos si no son importantes.
Tengo una red domiciliaria con la que comparto una conecci=F3n ADSL con algunos vecinos, El server es un woody con iptables el firewall que tengo configurado lo saque de un script que pueden ver en: http://www.linuxguruz.org/iptables/scripts/rc.firewall_023.txt El log me está tirando esto Apr 11 09:21:32 debian kernel: fp=3DTCP:1 a=3DDROP IN=3Dppp0 OUT=3D = MAC=3D SRC=3D151.36.47.206 DST=3D200.42.78.151 LEN=3D48 TOS=3D0x00 PREC=3D0x00 = TTL=3D116 ID=3D9805 DF PROTO=3DTCP SPT=3D2690 DPT=3D6346 WINDOW=3D16384 RES=3D0x00 = SYN URGP=3D0 Apr 11 09:21:36 debian kernel: fp=3DTCP:1 a=3DDROP IN=3Dppp0 OUT=3D = MAC=3D SRC=3D151.36.47.206 DST=3D200.42.78.151 LEN=3D48 TOS=3D0x00 PREC=3D0x00 = TTL=3D116 ID=3D10142 DF PROTO=3DTCP SPT=3D2690 DPT=3D6346 WINDOW=3D16384 = RES=3D0x00 SYN URGP=3D0 Apr 11 09:21:37 debian kernel: fp=3DBADFLAG:1 a=3DDROP IN=3Dppp0 OUT=3D = MAC=3D SRC=3D210.85.3.133 DST=3D200.42.78.151 LEN=3D40 TOS=3D0x00 PREC=3D0x00 = TTL=3D20 ID=3D39426 PROTO=3DTCP SPT=3D21 DPT=3D21 WINDOW=3D1028 RES=3D0x00 SYN = FIN URGP=3D0 Apr 11 09:21:41 debian kernel: fp=3DTCP:1 a=3DDROP IN=3Dppp0 OUT=3D = MAC=3D SRC=3D151.36.47.206 DST=3D200.42.78.151 LEN=3D48 TOS=3D0x00 PREC=3D0x00 = TTL=3D116 ID=3D10811 DF PROTO=3DTCP SPT=3D2690 DPT=3D6346 WINDOW=3D16384 = RES=3D0x00 SYN URGP=3D0 Apr 11 09:21:43 debian kernel: fp=3DTCP:1 a=3DDROP IN=3Dppp0 OUT=3D = MAC=3D SRC=3D24.169.74.4 DST=3D200.42.78.151 LEN=3D48 TOS=3D0x00 PREC=3D0x00 = TTL=3D109 ID=3D34976 DF PROTO=3DTCP SPT=3D4121 DPT=3D6346 WINDOW=3D16384 = RES=3D0x00 SYN URGP=3D0 Apr 11 09:21:46 debian kernel: fp=3DTCP:1 a=3DDROP IN=3Dppp0 OUT=3D = MAC=3D SRC=3D24.169.74.4 DST=3D200.42.78.151 LEN=3D48 TOS=3D0x00 PREC=3D0x00 = TTL=3D109 ID=3D35026 DF PROTO=3DTCP SPT=3D4121 DPT=3D6346 WINDOW=3D16384 = RES=3D0x00 SYN URGP=3D0 Apr 11 09:21:51 debian kernel: fp=3DTCP:1 a=3DDROP IN=3Dppp0 OUT=3D = MAC=3D SRC=3D24.216.195.114 DST=3D200.42.78.151 LEN=3D1452 TOS=3D0x00 = PREC=3D0x00 TTL=3D38 ID=3D21875 DF PROTO=3DTCP SPT=3D6346 DPT=3D3785 WINDOW=3D33888 = RES=3D0x00 ACK URGP=3D0 Apr 11 09:21:52 debian kernel: fp=3DTCP:1 a=3DDROP IN=3Dppp0 OUT=3D = MAC=3D SRC=3D24.169.74.4 DST=3D200.42.78.151 LEN=3D48 TOS=3D0x00 PREC=3D0x00 = TTL=3D109 ID=3D35124 DF PROTO=3DTCP SPT=3D4121 DPT=3D6346 WINDOW=3D16384 = RES=3D0x00 SYN URGP=3D0 La IP 200.42.78.151 por lo que puedo ver en el whois es de telefónica, si bien el servicio me lo da ciudad se rutea por telefónica así que = no habría problema. El tema es por que me llegan a mi estos paquetes y como puedo evitarlos. Gracias. Pd: Acá les mando el whois por si les interesa whois 200.42.78.151 Prima S.A. (NETBLK-PRIMA-BLK-1) Lima 1261 Buenos Aires, 1138 AR Netname: PRIMA-BLK-1 Netblock: 200.42.0.0 - 200.42.127.255 Maintainer: PRIA Coordinator: Fernandez, Miguel (MF127-ARIN) [EMAIL PROTECTED] 54-11-4370-0073 Domain System inverse mapping provided by: O200.PRIMA.COM.AR 200.42.0.108 O2000.PRIMA.COM.AR 200.42.0.109 Record last updated on 15-Mar-2000. Database last updated on 10-Apr-2002 19:59:00 EDT. _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
