-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday, 2023-04-25 at 22:58 +0200, Carlos E. R. wrote: How do I interpret this one? <0.4> 2023-04-29T23:12:01.790378+02:00 Isengard kernel - - - [1293859.876603][ C3] FINAL_REJECT: IN=eth0 OUT=MAC=ff:ff:ff:ff:ff:ff:96:...:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=322 TOS=0x10 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=68 DPT=67 LEN=302 It seems to be the one remaining noise on the firewall. It is about DHCP, and a broadcast, that I know. But I don't know if I should accept, reject, drop, nor how to accept them, or silence them. Oh, another strange one. But just one packet. <0.4> 2023-04-30T01:12:25.061938+02:00 Isengard kernel - - - [1301083.230432][ C3] FINAL_REJECT: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:d0:...:00 SRC=192.168.1.200 DST=255.255.255.255 LEN=124 TOS=0x00 PREC=0x00 TTL=64 ID=45743 DF PROTO=UDP SPT=26999 DPT=26999 LEN=104 I don't know what machine this is. Not a computer. It responds to pings. Telcontar:~ # nmap -O 192.168.1.200 Starting Nmap 7.92 ( https://nmap.org ) at 2023-04-30 03:44 CEST Nmap scan report for 192.168.1.200 Host is up (0.00016s latency). Not shown: 997 closed tcp ports (reset) PORT STATE SERVICE 53/tcp open domain 1234/tcp filtered hotline 8090/tcp open opsmessaging MAC Address: D0:FC:D0:4C:D1:6C (Unknown) Device type: general purpose Running: Linux 3.X|4.X OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 OS details: Linux 3.2 - 4.9 Network Distance: 1 hop OS detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 2.96 seconds Telcontar:~ # The router identifies it as "HUMAX_PTT1000_ES_D0FCD04CD16C -" Now "humax" is familiar... 192.168.1.200 is just the start of the "DHCP Conditional Serving Pool" range as set by the ISP. Ah, it must be the TV receiver. Confirmed, it is the TV decoder. That's a strange broadcast, strange port. I switched it off, but still responds to pings... ah, that's the fast powerup feature. - -- Cheers, Carlos E. R. (from openSUSE 15.4 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCZE3MdRwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVMlgAoIwtNrVmoEx62u8FgJLI 7w8AmD2rAJ4j9OI7ZH0xW0r1w35VeBsMvvmr7Q== =8F3Z -----END PGP SIGNATURE-----