Mailinglist Archive: opensuse (2800 mails)

< Previous Next >
Re: [opensuse] interpreting Firewall message in /var/log/firewall
  • From: "Joe Morris (NTM)" <Joe_Morris@xxxxxxx>
  • Date: Thu, 08 Feb 2007 07:54:44 +0800
  • Message-id: <45CA66C4.9090500@xxxxxxx>
riccardo35@xxxxxxxxx wrote:
> Hello, Open_SuSErs
>
> Could someone please enlighten me, as to the meaning of :-
> ...................
>
> Feb 6 14:38:46 AIG kernel: SFW2-IN-ILL-TARGET
This is an input packet blocked because of an illegal target (as defined
by your config)
> IN=vmnet8
It came in on your vmware net interface.
> OUT=
> MAC=ff:ff:ff:ff:ff:ff:00:0c:29:6c:3d:e4:08:00
the from MAC address was all ones, yours was 0c:29:6c:3d:e4:08 Ethernet
> SRC=0.0.0.0
>
src IP of the packet
> DST=255.255.255.255
destination IP address (i.e. broadcast)
> LEN=337
length
> TOS=0x00 PREC=0x00
not sure
> TTL=128
time to live
> ID=1 PROTO=UDP
>
important, the protocol was a udp packet
> SPT=68
source port
> DPT=67
destination port
> LEN=317
>
>
Summary, this was a broadcast packet from the DHCP server on your
network to your machine, which you are blocking. There is a config
option to allow broadcasts and not to log them. HTH.

--
Joe Morris
Registered Linux user 231871 running openSUSE 10.2 x86_64






--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
References