RE: [leaf-user] Windows XP attacking my firewall?

2002-08-12 Thread Matt Russell
--Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott C. Best Sent: Monday, August 12, 2002 11:42 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Windows XP attacking my firewall? Matt: That's an interesting firewall

Re: [leaf-user] Windows XP attacking my firewall?

2002-08-12 Thread Scott C. Best
Matt: That's an interesting firewall log. Two quick questions spring to mind: 1. The source-IP is 192.0.1.11, the dest is 192.0.1.7, but this is coming in on the eth0 interface of your firewall. So... how does your LEAF firewall connected to your WinXP box? I'm presuming that 19

RE: [leaf-user] Windows XP attacking my firewall?

2002-08-12 Thread Tom Eastep
On Mon, 12 Aug 2002, Matt Russell wrote: > This is UPNP -- you must have an old version of Shorewall as later > versions had an entry for this in the common.def file. You can kill these > by creating /etc/shorewall/common (if that file isn't there already) and > add the following to it: > >

RE: [leaf-user] Windows XP attacking my firewall?

2002-08-12 Thread Matt Russell
you are the man. thank you. FYI bering is version rc-2. thanks- matt -Original Message- From: Tom Eastep [mailto:[EMAIL PROTECTED]] Sent: Monday, August 12, 2002 10:04 AM To: Matt Russell Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Windows XP attacking my firewall? On Mon, 12 Aug

Re: [leaf-user] Windows XP attacking my firewall?

2002-08-12 Thread Tom Eastep
On Mon, 12 Aug 2002, Matt Russell wrote: > in /var/log/syslog i get the following error repeated three times every 25 > seconds: > > Aug 9 15:45:23 firewall kernel: Shorewall:all2all:REJECT:IN=eth0 OUT= > MAC=00:04:76:e2:6c:6c:00:40:95:30:aa:71:08:00 SRC=192.0.1.11 DST=192.0.1.7 > LEN=160 TOS=0

[leaf-user] Windows XP attacking my firewall?

2002-08-12 Thread Matt Russell
in /var/log/syslog i get the following error repeated three times every 25 seconds: Aug 9 15:45:23 firewall kernel: Shorewall:all2all:REJECT:IN=eth0 OUT= MAC=00:04:76:e2:6c:6c:00:40:95:30:aa:71:08:00 SRC=192.0.1.11 DST=192.0.1.7 LEN=160 TOS=0x00 PREC=0x00 TTL=128 ID=10522 PROTO=UDP SPT=1037 DPT=