On Tuesday 20 May 2003 00.23, Tom Nielsen wrote:
After looking at my /var/log/messages, I find this one repeating all the time...
May 18 08:25:18 fwpc kernel: Packet log: output REJECT eth0 PROTO=17 10.10.10.10:61000 198.162.0.1:137 L=96 S=0x00 I=55998 F=0x0000 T=127 (#54)
It happens about every 1 to 2 seconds.
The 10.10.10.10 is my external IP and the 198.162.0.1 is my internal IP. This machine's purpose is a firewall box.
Are you running samba on that machine? Do you have some sort of reverse masquerading set up on that machine? Port 137 is something to do with windows file sharing, possibly netBIOS. The packet is rejected, so nothing gets through with this particular package, but it's still strange that it should get past the NAT. How exactly is the firewall configured?