Re: [SLE] Martian source

On 10/23/2003 06:37 AM, Kastus wrote:

I have both FW_LOG_CRITICAL and FW_LOG_ALL set to "yes" but SuSEfirewall is not logging those spoofed packets from localhost.

Does it mean that kernel drops martian source packets before they reach iptables?

Check FW_KERNEL_SECURITY. This needs to be Yes to log the martian sources messages. -- Joe Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Web Address: http://www.mydestiny.net/~joe_morris Registered Linux user 231871 God said, I AM that I AM. I say, by the grace of God, I am what I am.