--- Anders Johansson
On Tuesday 20 May 2003 00.23, Tom Nielsen wrote:
After looking at my /var/log/messages, I find this one repeating all the time...
May 18 08:25:18 fwpc kernel: Packet log: output REJECT eth0 PROTO=17 10.10.10.10:61000 198.162.0.1:137 L=96 S=0x00 I=55998 F=0x0000 T=127 (#54)
It happens about every 1 to 2 seconds.
The 10.10.10.10 is my external IP and the 198.162.0.1 is my internal IP. This machine's purpose is a firewall box.
Are you running samba on that machine?
Do you have some sort of reverse masquerading set up on that machine?
Port 137 is something to do with windows file sharing, possibly netBIOS.
It's wins netbios packet encapsulated in IP/UDP. Martin The
packet is rejected, so nothing gets through with this particular package, but it's still strange that it should get past the NAT. How exactly is the firewall configured?
-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
__________________________________ Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. http://search.yahoo.com