Dear my friend Ian.... Could you tell me mo detail about the steps? If I want to allow this IP (145.253.2.196), what should I do? What is the name and the port number of DNS translation in "/etc/services"? I thought that is 53, am I wrong? --- Ian David Laws wrote:

On Friday 28 February 2003 13:54, Prabu Subroto wrote: SuSE-FW-ILLEGAL-TARGET IN=ippp0 OUT= MAC= SRC=145.253.2.196 DST=145.254.88.223 LEN=96 TOS=0x00 PREC=0x00 TTL=247 ID=38391 DF PROTO=UDP SPT=53 DNS DPT=1096 Common Name Resolution Protocol LEN=76

...

SPT=53 DPT=1096 If you look hear you are receiving a DNS translation if you look up the 2 ports in /etc/services. The SRC ip address seems to external ISP but with nslookup I cannot find this address. If that ip is legal then allow this ip to come in for DNS.

Hopefully this will help you further

Ian

__________________________________________________ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/