Re: [suse-security] /var/log/warn messages
No need to worry, it's just some kazaa client trying to connect to your ip. If you have no static ip, it maybe somebody who got your current ip before used kazaa Thomas Piet Roorda [mailto:prooroa@wanadoo.nl] wrote:
is tyhis healthy or to worry? piet
Oct 17 12:20:13 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.73.226.105 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=65004 DF PROTO=TCP SPT=1238 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:20:14 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.73.226.105 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=749 DF PROTO=TCP SPT=1238 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:36:06 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.51.24.214 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=23468 DF PROTO=TCP SPT=1527 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:36:07 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.51.24.214 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=28588 DF PROTO=TCP SPT=1527 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:36:07 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.51.24.214 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=32428 DF PROTO=TCP SPT=1527 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:36:08 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.51.24.214 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=36012 DF PROTO=TCP SPT=1527 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402)
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
On Thursday 17 October 2002 13:13, Thomas Lamy wrote: thanx for responding: I know it is kazaa, you're right I have a dynamic ip, but why is it acceptin, and shouldn't I close highports tcp/udp?? or, in other words: what will mess up if I close high ports in rc.config? piet
No need to worry, it's just some kazaa client trying to connect to your ip. If you have no static ip, it maybe somebody who got your current ip before used kazaa
Thomas
Piet Roorda [mailto:prooroa@wanadoo.nl] wrote:
is tyhis healthy or to worry? piet
Oct 17 12:20:13 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.73.226.105 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=65004 DF PROTO=TCP SPT=1238 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:20:14 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.73.226.105 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=749 DF PROTO=TCP SPT=1238 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:36:06 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.51.24.214 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=23468 DF PROTO=TCP SPT=1527 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:36:07 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.51.24.214 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=28588 DF PROTO=TCP SPT=1527 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:36:07 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.51.24.214 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=32428 DF PROTO=TCP SPT=1527 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402) Oct 17 12:36:08 photoserver kernel: SuSE-FW-ACCEPTIN=ppp0 OUT= MAC= SRC=213.51.24.214 DST=213.17.32.99 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=36012 DF PROTO=TCP SPT=1527 DPT=1214 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058401010402)
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
participants (2)
-
Piet Roorda -
Thomas Lamy