Hi Richard, On 2001.08.10 18:56:09 +0100 Richard Ibbotson wrote:
Hello
...
After re-installing and using it for a couple of days I now find that when I disconnect from the net that I get a message in my /var/log/messages console that says .........
kernel: Packet log: output DENY ippp0 PROTO=17 address.of.my.machine: 61122 and also ...
kernel: Packet log: output DENY ippp0 PROTO=17 address.of.my.machine:61127 address.of.my.ISP:53
I had a look in /etc/services and can't find a reference to port 61122 or 61127. Does anyone know what that is ? Also, does anyone know why I'm getting this message scrolling down the screen all the time ? I notice that it starts up shortly after I boot my workstation which is attached to my own internal network.
These packets are ( _/ probably \_ ) harmless. They are requests from some process on your machine doing a DNS enquiry to your ISP. Various deamons could be responsible - eg sendmail, xntpd, etc, etc - anything which may need to map an IP address to a hostname. Linux processes use the (generally unreserved) high ports (>60000 ish) to start outgoing connections like this.
Also, can anyone tell me how to get the personal firewall to log messages to /var/log/messages ? I have to use my own firewall script so that I can actually read the log messages in /var/log/messages.
Nope, coz' I don't use it. Try 'man syslog' - it may be your friend! HTH, Maf.
Thanks
-- Richard
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Maf. King Standby Exhibition Services ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "It is easier to do a job right than to explain why you didn't." - Martin Van Buren ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~