On 7/31/12 4:28 PM, "Øyvind Lode - Forums" <[email protected]> wrote:
>Hi all: > >I see a lot of the errors below in /var/log/messages on my firewall: > >Aug 1 00:47:44 munin kernel: [109008.257109] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:48:44 munin kernel: [109068.257384] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:49:44 munin kernel: [109128.257509] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:50:44 munin kernel: [109188.257788] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:51:44 munin kernel: [109248.258060] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:52:44 munin kernel: [109308.258438] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:53:44 munin kernel: [109368.258711] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:54:44 munin kernel: [109428.259190] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:55:44 munin kernel: [109488.259259] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:56:44 munin kernel: [109548.259484] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 >Aug 1 00:57:44 munin kernel: [109608.259758] martian source 192.168.1.5 >from 127.0.0.1, on dev eth1 > >The pattern is that the kernel logs this every 60 seconds. > >192.168.1.5 = Wireless Access Point. > >The AP receives it's IP via a static lease from isc-dhcp-server running >on the firewall box. > >Firewall: > >Debian wheezy >Shorewall 4.5.5.3 >Eth0 = net >Eth1 = loc > >If I turn off the AP the martian errors goes away. >Any ideas of why I see these messages? It's because the firewall is receiving packets from 127.0.0.1 on eth1. -Tom You do not need a parachute to skydive. You only need a parachute to skydive twice. ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
