Has anybody out their seen the following, hits on port 53?
Yep, this is a well known problem (see archives, when they work...). Change
ipfilter_firewall_cfg in ipfilter.conf with these extra lines (#New Port 53
filter start/end):
ipfilter_firewall_cfg () {
local ADDR
local DEST
local NET
--- Kevin Kropf [EMAIL PROTECTED] wrote:
Has anybody out their seen the following, hits on
port 53?
Sample:
Dec 1 14:48:57 kc_firewall kernel: Packet log:
input DENY eth0 PROTO=6
216.34.68.2:15209 24.80.151.202:53 L=44 S=0x00 I=0
F=0x T=248 (#44)
No, but In a very cursory
Leaf Leaf wrote:
No, but In a very cursory look through my recent logs
I have noticed one instance of about 100 packets from
one address denied in a 30 sec period. I'm guessing
it's a scan through my /27 block for some service on
port 27374, sample:
Nov 28 18:19:43 firewall kernel:
Has anybody out their seen the following, hits on port 53? Their is about
100 entries like this in a few seconds then nothing? This only happens now
and again, once or twice a week. I am using EigerStein2BETA.exe.
Sample:
Dec 1 14:48:57 kc_firewall kernel: Packet log: input DENY eth0
