Hello,
Your error logs
" Oct 7 19:51:45 furby kernel: Packet log: output DENY eth0 PROTO=6
216.178.84.110:80 65.56.237.226:2002 L=48 S
=0x00 I=17224 F=0x4000 T=64 (#2)" are saying that your trying to sent
malformed packets but your output chains are blocking them. It is saying
"proto=6" meaning
On 08/10/02 14:06 -0400, Chris S wrote:
> I'm getting a good amount of these DENY's in my logs, but I'm not sure
> exactly what they mean.
>
> Oct 7 19:51:45 furby kernel: Packet log: output DENY eth0 PROTO=6
> 216.178.84.110:80 65.56.237.226:2002 L=48 S=0x00 I=17224 F=0x4000 T=64 (#2)
The S
> Is my webserver trying to make connections going out
> on these ports, or is my webserver being attacked on these ports.
>
Whether your web server is infected with the worm or not, I can't say
for sure. But, according to the logs you've provided, it does appear
to be your web server tryi
e 1200
Arlington, Virginia 22209
-Original Message-
From: Chris S [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 08, 2002 2:06 PM
To: [EMAIL PROTECTED]
Subject: Ipchains Question / Seeking Information.
I'm getting a good amount of these DENY's in my logs, but I'm not su
I'm getting a good amount of these DENY's in my logs, but I'm not sure
exactly what they mean.
Oct 7 19:51:45 furby kernel: Packet log: output DENY eth0 PROTO=6
216.178.84.110:80 65.56.237.226:2002 L=48 S
=0x00 I=17224 F=0x4000 T=64 (#2)
Oct 7 19:51:48 furby kernel: Packet log: output DENY e
