On Tue, Apr 10, 2001 at 03:27:19PM +1000, CaT ([EMAIL PROTECTED]) wrote:
> On Tue, Apr 10, 2001 at 03:20:09PM +1000, Jobst Schmalenbach wrote:
> > afternoon all,
> >
> > I have the telnet port open in IPCHAINS but hosts.allow lets only a
> > few connect and the rest gets "send" to hosts.deny.
> >
> > BUT now I saw a weird entry in my logs:
> >
> > Apr 10 00:21:21 piquet kernel: Packet log: ppp0-in DENY ppp0 PROTO=6
>203.161.231.1:1532 203.63.73.52:53 L=60 S=0x10 I=49912 F=0x4000 T=44 SYN (#33)
> > Apr 10 00:21:24 piquet kernel: Packet log: ppp0-in DENY ppp0 PROTO=6
>203.161.231.1:1532 203.63.73.52:53 L=60 S=0x10 I=50325 F=0x4000 T=44 SYN (#33)
> > Apr 10 00:38:19 piquet kernel: Packet log: ppp0-in DENY ppp0 PROTO=6
>163.29.17.77:1316 203.63.73.52:53 L=60 S=0x10 I=38154 F=0x4000 T=46 SYN (#33)
> >
> > and as you can see its from different machines too!
>
> I'm lost. What's weird about it?
Nothing.
<standing in corner all red faced>
I should go home and have a long long rest.
telnet 23 != domain 53
I thought its telnet, I spend about 1 hour trying to figure out
were that packet was coming from.
(this is my upstream nameserver asking my nameserver what IP is what).
jobst
--
Diplomacy: The art of saying, "Nice Doggy," until you can find a stick.
| __, Jobst Schmalenbach, [EMAIL PROTECTED], Technical Director|
| _ _.--'-n_/ Barrett Consulting Group P/L & The Meditation Room P/L |
|-(_)------(_)= +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia|
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
