Mailinglist Archive: opensuse (3637 mails)

< Previous Next >
ports
  • From: "S.Toms" <smotrs@xxxxxxxxxxxxxx>
  • Date: Wed, 23 May 2001 11:01:26 -0700 (PDT)
  • Message-id: <Pine.LNX.4.21.0105211719220.29252-100000@xxxxxxxxxxxxxxxxxxx>
Hey all,
Quick question, every once in a while (via portsentry) I see the
following appear in /var/log/messages

May 20 13:34:25 pipedream kernel: Packet log: input DENY eth0 PROTO=6
203.133.11.2:1543 xxx.xxx.xx.xxx:111 L=60 S=0x00 I=41515 F=0x4000 T=47 SYN (#66)
May 20 14:08:05 pipedream kernel: Packet log: input DENY eth0 PROTO=6
136.145.187.100:1442 xx.xx.xxx.xxx:111 L=60 S=0x00 I=40735 F=0x4000 T=49 SYN (#66)

it's being denied, but am I right in believing that's port 66 which is for
Oracle SQL? or is it something else. The other ones I see is 11, and
occasionally 69 I only get maybe a few of these a day, similar addresses
each day, but nothing else from them, no other probes or queries show up.
I checked the addresses and their definately not my DHCP server or
servers I've used.
--
S.Toms - smotrs@xxxxxxxxxxxxxx - www.mindspring.com/~smotrs
SuSE Linux v7.0+ - Kernel 2.2.18

Hacker's Law:
The belief that enhanced understanding will necessarily stir a
nation to action is one of mankind's oldest illusions.


< Previous Next >