I'm running SuSE 7.0 (I've gone this far, why back out now and start over?), with the SuSEfirewall package that comes with it (2.6?). I'm connected to the internet via cable modem (eth0), and have an internal network of around four or five computers. The internal network interface (eth1) has the IP address of 192.168.10.1. I have the firewall instructions set up the same as they were under SuSE 6.4, but I never got messages like this. With 7.0 and the current firewall, I get a ton of them every day. Can someone clue me in as to what access is being denied? I haven't had any complaints from users yet. TIA, Stan Koper Oct 29 08:55:48 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=254 S=0x00 I=1039 F=0x0000 T=64 (#6) Oct 29 08:55:48 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=236 S=0x00 I=1040 F=0x0000 T=64 (#6) Oct 29 09:03:54 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=254 S=0x00 I=1142 F=0x0000 T=64 (#6) Oct 29 09:03:54 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=236 S=0x00 I=1143 F=0x0000 T=64 (#6) Oct 29 09:12:55 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=254 S=0x00 I=1144 F=0x0000 T=64 (#6) Oct 29 09:12:55 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=236 S=0x00 I=1145 F=0x0000 T=64 (#6) Oct 29 09:23:01 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=254 S=0x00 I=1146 F=0x0000 T=64 (#6) Oct 29 09:23:01 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=236 S=0x00 I=1147 F=0x0000 T=64 (#6) -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
Stan Koper wrote:
I'm running SuSE 7.0 (I've gone this far, why back out now and start over?), with the SuSEfirewall package that comes with it (2.6?). I'm connected to the internet via cable modem (eth0), and have an internal network of around four or five computers. The internal network interface (eth1) has the IP address of 192.168.10.1.
I have the firewall instructions set up the same as they were under SuSE 6.4, but I never got messages like this. With 7.0 and the current firewall, I get a ton of them every day. Can someone clue me in as to what access is being denied? I haven't had any complaints from users yet.
TIA,
Stan Koper
Oct 29 08:55:48 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=254 S=0x00 I=1039 F=0x0000 T=64 (#6) Oct 29 08:55:48 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=236 S=0x00 I=1040 F=0x0000 T=64 (#6) Oct 29 09:03:54 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=254 S=0x00 I=1142 F=0x0000 T=64 (#6) Oct 29 09:03:54 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=236 S=0x00 I=1143 F=0x0000 T=64 (#6) Oct 29 09:12:55 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=254 S=0x00 I=1144 F=0x0000 T=64 (#6) Oct 29 09:12:55 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=236 S=0x00 I=1145 F=0x0000 T=64 (#6) Oct 29 09:23:01 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=254 S=0x00 I=1146 F=0x0000 T=64 (#6) Oct 29 09:23:01 alembic kernel: Packet log: input DENY eth1 PROTO=17 192.168.10.1:138 192.168.10.255:138 L=236 S=0x00 I=1147 F=0x0000 T=64 (#6)
138 is according to my /etc/services is NETBIOS do you have samba configured in your network/firewall script -- Togan Muftuoglu toganm@turk.net 100% MS FREE Absolutely no component of Microsoft was used in the generation or posting of this e-mail. So it is virus free -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
participants (2)
-
skoper@mediaone.net
-
toganm@turk.net