13 Jun
2003
13 Jun
'03
04:56
* Carlos E. R. (robin1.listas@tiscali.es) [030612 17:19]:
Jun 12 13:27:48 nimrodel kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.203.230.10 DST=81.41.200.5 LEN=124 TOS=0x00 PREC=0x00 TTL=44 ID=24563 PROTO=UDP SPT=53 DPT=1024 LEN=104 (repeated four times within one second)
It's probably a query response from the root server -- it's coming from port 53 to a high port on your system. Then again, since it's udp the source IP could be fake but that's doubtful given that 192.203.230.10 really is E.ROOT-SERVERS.NET. -- -ckm