Someone from cx280252-a.phnx1.az.home.com (a cable modem user in Phoneix, AZ on the @home network) pinged your host. This is an icmp request (PROTO=1) type 8. It is not an connection attempt on port 8. Nothing to worry about. Gerry On 30 Aug 2000, Russell Evans wrote:
I am running the firewall update for SuSE 6.4 with the following settings.
FW_DEV_WORLD="eth0" FW_DEV_INT="" FW_DEV_DMZ="" FW_ROUTE="no" FW_MASQUERADE="no" FW_MASQ_NETS="" FW_MASQ_DEV="$FW_DEV_WORLD" FW_PROTECT_FROM_INTERNAL="yes" FW_AUTOPROTECT_GLOBAL_SERVICES="yes" FW_SERVICES_EXTERNAL_TCP="22 53 110 25" FW_SERVICES_EXTERNAL_UDP="514 53" FW_SERVICES_DMZ_TCP="" FW_SERVICES_DMZ_UDP="" FW_SERVICES_INTERNAL_TCP="" FW_SERVICES_INTERNAL_UDP="" FW_TRUSTED_NETS="" FW_SERVICES_TRUSTED_TCP="" FW_SERVICES_TRUSTED_UDP="" FW_ALLOW_INCOMING_HIGHPORTS_TCP="dns" FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes" FW_SERVICE_DNS="yes" FW_SERVICE_DHCLIENT="no" FW_SERVICE_DHCPD="no" FW_FORWARD_TCP="" FW_FORWARD_UDP="" FW_REDIRECT_TCP="" FW_REDIRECT_UDP="" FW_LOG_DENY_CRIT="yes" FW_LOG_DENY_ALL="yes" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="no" FW_KERNEL_SECURITY="yes" FW_STOP_KEEP_ROUTING_STATE="no" FW_ALLOW_PING_FW="yes" FW_ALLOW_PING_DMZ="no" FW_ALLOW_FW_TRACEROUTE="no" FW_ALLOW_FW_SOURCEQUENCH="yes" FW_MASQ_MODULES="autofw cuseeme ftp irc mfw portfw quake raudio user vdolive"
The following was logged. My hostname and IP changed.
Aug 27 20:06:14 noname kernel: Packet log: input ACCEPT eth0 PROTO=1 24.8.72.245:8 xxx.yyy.zzz.www:0 L=36 S=0x00 I=56281 F=0x0000 T=118 (#6)
Is this a hole in the firewall setup? I do not have the experience to know.
Thank you Russell
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
Gerry "The lyf so short, the craft so long to learne" Chaucer