The 03.09.16 at 16:45, Pep Serrano wrote:
martian source xxx.xxx.xxx.xxx from 127.0.0.1, on dev ppp0, where xxx.xxx.xxx.xxx is my public IP, the IP address in the interface ppp0.
Me too, starting today, and some other people: Oct 4 13:43:08 nimrodel kernel: martian source 212.166.94.23 from 127.0.0.1, on dev ppp0 Oct 4 13:43:08 nimrodel kernel: ll header: 45:08:00:28 Oct 4 13:43:58 nimrodel kernel: martian source 212.166.94.23 from 127.0.0.1, on dev ppp0 Oct 4 13:43:58 nimrodel kernel: ll header: 45:08:00:28 The address 212.166.94.23 is my IP, asigned temporarily for this connection only by the my provider (tiscali), by modem. It is thus impossible to receive from internet packets from the 127.0.0.1 address... But we are! That's why they named them "martian" source. It must be some new worm, virus, or whatever. -- Cheers, Carlos Robinson