Hello susers, I have the lisa deamon running and get the following logs in my FW: Apr 26 19:15:40 petit kernel: SuSE-FW-DROP-ANTI-SPOOFINGIN=eth0 OUT= MAC= SRC=192.168.0.100 DST=255.255.255.255 LEN=44 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=1028 DPT=7741 LEN=24 How can avoid it? Cheers, Pep Serrano.
On Fri, 26 Apr 2002, Pep Serrano wrote:
I have the lisa deamon running and get the following logs in my FW:
Apr 26 19:15:40 petit kernel: SuSE-FW-DROP-ANTI-SPOOFINGIN=eth0 OUT= MAC= SRC=192.168.0.100 DST=255.255.255.255 LEN=44 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=1028 DPT=7741 LEN=24
These look similar to the logs caused by running nmbd or smbclient from the samba suite. The firewall does not seem to break samba as it is dropping an incoming broadcast from itself (I guess the IP of your fw machine's ethernet is 192.168.0.100, and I guess that lisa is working ok - is it?)
How can avoid it?
I don't see an option for this in version 1.7 of SuSEfirewall2, but I think that is quite old. I just ignore these (caused by my nmbd) but I guess you could configre a logsurfer tool to ignore them for you. dproc
Hi again, On Friday 26 April 2002 22:22, dproc@dol.net wrote:
Apr 26 19:15:40 petit kernel: SuSE-FW-DROP-ANTI-SPOOFINGIN=eth0 OUT= MAC= SRC=192.168.0.100 DST=255.255.255.255 LEN=44 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=1028 DPT=7741 LEN=24
These look similar to the logs caused by running nmbd or smbclient from the samba suite.
You are rigth. Lisa actually calls to 'nmblookup "*" ' to discover the hosts in the network.
The firewall does not seem to break samba as it is dropping an incoming broadcast from itself (I guess the IP of your fw machine's ethernet is 192.168.0.100, and I guess that lisa is working ok - is it?)
Sorry I wrote "breaks" when I meant "sucks the log files" :-)
I don't see an option for this in version 1.7 of SuSEfirewall2, but I think that is quite old. I just ignore these (caused by my nmbd) but I guess you could configre a logsurfer tool to ignore them for you.
Ok, so I ignore these and that's fine? Thanks, Pep Serrano.
participants (2)
-
dproc@dol.net
-
Pep Serrano