Mailinglist Archive: opensuse (878 mails)

< Previous Next >
Re: [opensuse] firewall message
On 08/05/2015 09:43 PM, Fr David Ousley wrote:
This message keeps showing up repeatedly in the journalctl log:

Aug 05 21:29:43 linux2 kernel: SFW2-INext-DROP-DEFLT IN=enp3s0 OUT=
MAC=33:33:00:00:00:fb:a0:88:b4:c5:99:9c:86:dd
SRC=fe80:0000:0000:0000:c534:6352:2873:f469
DST=ff02:0000:0000:0000:0000:0000:0000:00fb LEN=88

I gather it has to do with the firewall. The MAC address does not seem
to match any of the devices on the local network (which is small). Can
anyone tell me what it means and what I should do about it?

Running OpenSuse 13.2, wired ethernet connection to router.

Obvious question(s):

a) us your LAN enabled for IPv6?
b) is the router enabled for IPv6 on either side?
c) what's the MAX address of the _far_ side of your router?

Just a a maybe-help, could you run 'arp' and let us have the output.

I'm not sure how you might have things configured at your site, but I
have my router sending syslog messages to my desktop. If I want
one-and-only-one repository (I don't) I could pipe that into journalctl.

Do you?

The reason I ask is "what can show up in your journalctl and what can't"?






--
A: Yes.
> Q: Are you sure?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting frowned upon?

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx

< Previous Next >
References