Am Montag, 17. September 2001 17:39 schriebst Du: Also, unter netstat -plan erhalte ich folgende Ausgabe: Server:~ # netstat -plan Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:515 0.0.0.0:* LISTEN 879/lpd: accepting tcp 0 0 0.0.0.0:8007 0.0.0.0:* LISTEN 1259/java tcp 0 0 0.0.0.0:2024 0.0.0.0:* LISTEN 2816/kdeinit: kxmlr tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 2699/X tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 1259/java tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 926/sendmail: accep tcp 0 0 0.0.0.0:7102 0.0.0.0:* LISTEN 1285/fontfs tcp 0 0 62.156.3.249:2834 212.79.47.21:110 TIME_WAIT - tcp 0 0 62.156.3.249:2833 213.165.64.20:110 TIME_WAIT - tcp 0 0 62.156.3.249:2829 149.221.232.25:80 TIME_WAIT - tcp 0 0 62.156.3.249:2832 216.136.173.10:110 TIME_WAIT - tcp 0 0 62.156.3.249:2830 194.25.134.26:110 TIME_WAIT - tcp 0 0 :::113 :::* LISTEN 698/in.identd tcp 1 0 ::ffff:62.156.3.24:2762 ::ffff:209.247.41.60:80 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2084 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2535 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2460 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2378 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2326 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2321 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2366 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2651 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin tcp 0 0 ::ffff:62.156.3.24:2579 ::ffff:202.58.118.12:21 CLOSE_WAIT 2853/mozilla-bin raw 0 0 0.0.0.0:1 0.0.0.0:* 7 549/ippl raw 0 0 0.0.0.0:6 0.0.0.0:* 7 549/ippl raw 0 0 0.0.0.0:255 0.0.0.0:* 7 816/scanlogd Active UNIX domain sockets (servers and established) Proto RefCnt Flags Type State I-Node PID/Program name Path unix 2 [ ACC ] STREAM LISTENING 34326636 2807/artsd /tmp/mcop-root/Server_CHIP-0af7-3ba605f5 unix 2 [ ACC ] STREAM LISTENING 252127 1378/oafd /tmp/orbit-root/orb-815436876160605382 unix 2 [ ACC ] STREAM LISTENING 34309015 2825/kdeinit: Runni /tmp/ksocket-root/kdeinit-:0 unix 8 [ ] DGRAM 986 599/syslogd /dev/log unix 2 [ ACC ] STREAM LISTENING 34275650 2699/X /tmp/.X11-unix/X0 unix 2 [ ACC ] STREAM LISTENING 34343393 2838/ksmserver /tmp/.ICE-unix/2838 unix 2 [ ACC ] STREAM LISTENING 2978 926/sendmail: accep /var/run/sendmail/control unix 2 [ ACC ] STREAM LISTENING 34309187 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 2 [ ACC ] STREAM LISTENING 1276 651/amavis-milter /var/run/amavis.sock unix 2 [ ACC ] STREAM LISTENING 34309370 2802/kdeinit: klaun /tmp/ksocket-root/klauncherSp0g8b.slave-socket unix 2 [ ACC ] STREAM LISTENING 43948732 3299/kdesud /tmp/ksocket-root/kdesud_:0 unix 2 [ ACC ] STREAM LISTENING 4704 983/nscd /var/run/.nscd_socket unix 3 [ ] STREAM CONNECTED 58124330 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 58124329 3798/kdeinit: konso unix 3 [ ] STREAM CONNECTED 58123802 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 58123801 3798/kdeinit: konso unix 3 [ ] STREAM CONNECTED 58123273 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 58123272 3798/kdeinit: konso unix 3 [ ] STREAM CONNECTED 57446124 2911/kmail /tmp/ksocket-root/kmailXpLlEb.slave-socket unix 3 [ ] STREAM CONNECTED 57446123 3785/kmailXpLlEb.sl unix 3 [ ] STREAM CONNECTED 46048889 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 46048888 3420/kdeinit: kio_u unix 3 [ ] STREAM CONNECTED 46048348 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 46048347 3420/kdeinit: kio_u unix 3 [ ] STREAM CONNECTED 46048346 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 46048345 3420/kdeinit: kio_u unix 3 [ ] STREAM CONNECTED 43958298 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 43958297 3302/konquerorChWVw unix 3 [ ] STREAM CONNECTED 43958300 3290/kdeinit: konqu /tmp/ksocket-root/konquerorChWVwa.slave-socket unix 3 [ ] STREAM CONNECTED 43958296 3302/konquerorChWVw unix 3 [ ] STREAM CONNECTED 43958025 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 43958024 3301/konqueror7pi22 unix 3 [ ] STREAM CONNECTED 43958299 3290/kdeinit: konqu /tmp/ksocket-root/konqueror7pi22b.slave-socket unix 3 [ ] STREAM CONNECTED 43958023 3301/konqueror7pi22 unix 3 [ ] STREAM CONNECTED 43948737 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 43948736 3299/kdesud unix 3 [ ] STREAM CONNECTED 43938453 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 43938452 3296/kdeinit: kcook unix 3 [ ] STREAM CONNECTED 43937926 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 43937925 3296/kdeinit: kcook unix 3 [ ] STREAM CONNECTED 43937921 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 43937920 3296/kdeinit: kcook unix 17 [ ] STREAM CONNECTED 43937409 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 43937408 3294/konquerorro5wO unix 3 [ ] STREAM CONNECTED 43937410 3290/kdeinit: konqu /tmp/ksocket-root/konquerorro5wOa.slave-socket unix 3 [ ] STREAM CONNECTED 43937407 3294/konquerorro5wO unix 3 [ ] STREAM CONNECTED 43918321 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 43918320 3290/kdeinit: konqu unix 3 [ ] STREAM CONNECTED 43917829 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 43917828 3290/kdeinit: konqu unix 3 [ ] STREAM CONNECTED 43917581 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 43917580 3290/kdeinit: konqu unix 3 [ ] STREAM CONNECTED 40943563 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 40943562 3116/xterm unix 3 [ ] STREAM CONNECTED 39095953 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 39095952 3011/kbiff unix 3 [ ] STREAM CONNECTED 39095717 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 39095716 3011/kbiff unix 3 [ ] STREAM CONNECTED 39095254 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 39095253 3011/kbiff unix 3 [ ] STREAM CONNECTED 34865310 2911/kmail /tmp/ksocket-root/kmailhyBc2b.slave-socket unix 3 [ ] STREAM CONNECTED 34865309 2915/kmailhyBc2b.sl unix 3 [ ] STREAM CONNECTED 34638047 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 34638046 2911/kmail unix 3 [ ] STREAM CONNECTED 34637812 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34637811 2911/kmail unix 3 [ ] STREAM CONNECTED 34637580 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34637579 2911/kmail unix 2 [ ] STREAM 34389955 2853/mozilla-bin unix 3 [ ] STREAM CONNECTED 34386869 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34386868 2853/mozilla-bin unix 3 [ ] STREAM CONNECTED 34369981 2807/artsd /tmp/mcop-root/Server_CHIP-0af7-3ba605f5 unix 3 [ ] STREAM CONNECTED 34369980 2852/noatun unix 3 [ ] STREAM CONNECTED 34369560 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34369559 2852/noatun unix 3 [ ] STREAM CONNECTED 34368717 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 34368716 2852/noatun unix 3 [ ] STREAM CONNECTED 34368296 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34368295 2852/noatun unix 3 [ ] STREAM CONNECTED 34354564 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 34354563 2848/kdeinit: kicke unix 3 [ ] STREAM CONNECTED 34353950 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34353949 2848/kdeinit: kicke unix 3 [ ] STREAM CONNECTED 34353948 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34353947 2848/kdeinit: kicke unix 3 [ ] STREAM CONNECTED 34351740 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 34351739 2845/kdeinit: kdesk unix 3 [ ] STREAM CONNECTED 34351119 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34351118 2845/kdeinit: kdesk unix 3 [ ] STREAM CONNECTED 34351117 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34351116 2845/kdeinit: kdesk unix 3 [ ] STREAM CONNECTED 34350912 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 34350911 2844/kdeinit: khotk unix 3 [ ] STREAM CONNECTED 34350106 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34350105 2844/kdeinit: khotk unix 3 [ ] STREAM CONNECTED 34349902 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34349901 2844/kdeinit: khotk unix 3 [ ] STREAM CONNECTED 34349898 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34349897 2841/kdeinit: kwrit unix 3 [ ] STREAM CONNECTED 34349896 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34349895 2841/kdeinit: kwrit unix 3 [ ] STREAM CONNECTED 34344704 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34344703 2839/kdeinit: kwin unix 3 [ ] STREAM CONNECTED 34343958 2838/ksmserver /tmp/.ICE-unix/2838 unix 3 [ ] STREAM CONNECTED 34343957 2839/kdeinit: kwin unix 3 [ ] STREAM CONNECTED 34343770 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34343769 2839/kdeinit: kwin unix 3 [ ] STREAM CONNECTED 34343397 2807/artsd /tmp/mcop-root/Server_CHIP-0af7-3ba605f5 unix 3 [ ] STREAM CONNECTED 34343396 2831/knotify unix 3 [ ] STREAM CONNECTED 34343392 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34343391 2838/ksmserver unix 3 [ ] STREAM CONNECTED 34342843 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34342842 2838/ksmserver unix 3 [ ] STREAM CONNECTED 34334351 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34334350 2831/knotify unix 3 [ ] STREAM CONNECTED 34334349 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34334348 2831/knotify unix 3 [ ] STREAM CONNECTED 34329234 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34329233 2816/kdeinit: kxmlr unix 3 [ ] STREAM CONNECTED 34324671 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34324670 2825/kdeinit: Runni unix 3 [ ] STREAM CONNECTED 34309554 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34309553 2804/kdeinit: kded unix 3 [ ] STREAM CONNECTED 34309368 2800/kdeinit: dcops /tmp/.ICE-unix/2800 unix 3 [ ] STREAM CONNECTED 34309367 2802/kdeinit: klaun unix 3 [ ] STREAM CONNECTED 34309193 2802/kdeinit: klaun unix 3 [ ] STREAM CONNECTED 34309192 2825/kdeinit: Runni unix 3 [ ] STREAM CONNECTED 34287429 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34287428 2715/xconsole unix 10 [ ] STREAM CONNECTED 34280218 2699/X /tmp/.X11-unix/X0 unix 3 [ ] STREAM CONNECTED 34275652 2700/-:0 unix 2 [ ] DGRAM 998697 300/ipppd unix 2 [ ] DGRAM 223972 549/ippl unix 2 [ ] DGRAM 3521 958/cron unix 2 [ ] DGRAM 2976 926/sendmail: accep unix 2 [ ] DGRAM 1805 603/klogd unix 2 [ ] DGRAM 1653 698/in.identd Active IPX sockets Proto Recv-Q Send-Q Local Address Foreign Address State Server:~ # Unter Isof -i erhalte ich folgendes: Server:~ # Isof -i bash: Isof: command not found Server:~ # Gruss, Jürgen

(...)

...

Server:~ # netstat -plan / Isof -i

Ähm, das waren zwei Kommandos, also

bash> netstat -plan bash> lsof -i

...

Kernel Interface table Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg dummy 1500 0 0 0 0 0 0 0 0 0 BO (...) tunl0 1480 0 0 0 0 0 0 0 0 0 O Server:~ #

Wie bzw. wo kann ich einstellen, das solche Pakete nicht mehr durchgelasen werden?

Auch wenn es sich jetzt blöd anhört, rtm! Gerade bei einer Firewall sollte der Administrator wissen, was passiert. Deswegen raten viele auch von den Suse-Firewall Skripten ab, weil sie durch ihre Komplexität nicht leicht zu durchschauen sind.

Das Logging deutet auf ipchains hin, also falls du Kernel 2.2 benutzt, sieh dir das ipchains HowTo an. Falls du Kernel 2.4 benutzt, solltest du dir auf alle Fälle iptables (http://netfilter.samba.org mit den entsprechenden HowTos http://www.netcologne.de/~meberg/netfilter/) anschauen, da die Erstellung der Regeln für eine Firewall imho logischer erfolgt und man mit dem stateful Paketfilter auch eine bessere Sicherheit erhalten kann, allerdings nur, wenn man weiß was man tut.

bye lars.