Markus Heinze schrieb:
Juergen Dengg wrote:
[.....] Ich habe nochmal zusätzlich tail -f /var/log/messages bemüht. Als ich die Firewall aktivierte, kamen diese illegal target meldungen, wenn ich versuchte, irgendwo aufs Netz zuzugreifen. Für die FW-config bitte anderes Post in diesem Thread beachten! Oct 28 21:29:03 linux pppd[10409]: Using interface ppp0 Oct 28 21:29:03 linux pppd[10409]: Connect: ppp0 <--> eth1 Oct 28 21:29:03 linux pppd[10409]: Setting MTU to 1492. Oct 28 21:29:03 linux pppd[10409]: Couldn't increase MRU to 1500 Oct 28 21:29:03 linux pppd[10409]: Setting MTU to 1492. Oct 28 21:29:03 linux pppd[10409]: local IP address 80.145.244.176 Oct 28 21:29:03 linux pppd[10409]: remote IP address 217.5.98.180 Oct 28 21:29:03 linux pppd[10409]: Script /etc/ppp/ip-up finished (pid 10424), s tatus = 0x0 Okt 28 21:30:07 linux su: (to root) jsmith on /dev/pts/3 Okt 28 21:30:07 linux su: pam_unix2: session started for user root, service su Okt 28 21:33:50 linux su: pam_unix2: session finished for user root, service su Oct 28 21:33:56 linux SuSEfirewall2: Firewall rules set to CLOSE all network tra ffic. Oct 28 21:33:57 linux SuSEfirewall2: Firewall rules successfully set from /etc/s ysconfig/SuSEfirewall2 Oct 28 21:33:58 linux SuSEfirewall2: Firewall rules successfully set from /etc/sysconfig/SuSEfirewall2 Oct 28 21:34:18 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=194.25.2.129 DST=80.145.244.176 LEN=110 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=53 DPT=1489 LEN=90 Oct 28 21:34:23 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.5.115.7 DST=80.145.244.176 LEN=110 TOS=0x00 PREC=0x00 TTL=57 ID=51346 PROTO=UDP SPT=53 DPT=1490 LEN=90 Oct 28 21:34:28 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=194.25.2.129 DST=80.145.244.176 LEN=110 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=53 DPT=1489 LEN=90 Oct 28 21:34:33 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.5.115.7 DST=80.145.244.176 LEN=110 TOS=0x00 PREC=0x00 TTL=57 ID=44069 PROTO=UDP SPT=53 DPT=1490 LEN=90 Oct 28 21:34:38 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=194.25.2.129 DST=80.145.244.176 LEN=138 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=53 DPT=1490 LEN=118 Oct 28 21:34:43 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.5.115.7 DST=80.145.244.176 LEN=138 TOS=0x00 PREC=0x00 TTL=57 ID=46461 PROTO=UDP SPT=53 DPT=1491 LEN=118 Oct 28 21:34:47 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=194.25.2.129 DST=80.145.244.176 LEN=157 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=53 DPT=1492 LEN=137 Oct 28 21:34:48 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=194.25.2.129 DST=80.145.244.176 LEN=138 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=53 DPT=1490 LEN=118 Oct 28 21:34:52 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.5.115.7 DST=80.145.244.176 LEN=157 TOS=0x00 PREC=0x00 TTL=57 ID=6894 PROTO=UDP SPT=53 DPT=1493 LEN=137 Oct 28 21:34:57 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=194.25.2.129 DST=80.145.244.176 LEN=157 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=53 DPT=1492 LEN=137 Oct 28 21:35:02 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.5.115.7 DST=80.145.244.176 LEN=157 TOS=0x00 PREC=0x00 TTL=57 ID=1627 PROTO=UDP SPT=53 DPT=1493 LEN=137 Oct 28 21:35:05 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=213.39.207.135 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=18305 DF PROTO=TCP SPT=4062 DPT=4662 WINDOW=64800 RES=0x00 SYN URGP=0 OPT (020405A001010402) Oct 28 21:35:07 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=194.25.2.129 DST=80.145.244.176 LEN=138 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=53 DPT=1493 LEN=118 Oct 28 21:35:08 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=213.39.207.135 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=18447 DF PROTO=TCP SPT=4062 DPT=4662 WINDOW=64800 RES=0x00 SYN URGP=0 OPT (020405A001010402) Oct 28 21:35:09 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=212.40.229.71 DST=80.145.244.176 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=57246 DF PROTO=TCP SPT=56422 DPT=4662 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A00EB2A500000000001030300) Oct 28 21:35:12 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=212.40.229.71 DST=80.145.244.176 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=57247 DF PROTO=TCP SPT=56422 DPT=4662 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A00EB2B7C0000000001030300) Oct 28 21:35:12 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.5.115.7 DST=80.145.244.176 LEN=138 TOS=0x00 PREC=0x00 TTL=57 ID=23283 PROTO=UDP SPT=53 DPT=1494 LEN=118 Oct 28 21:35:14 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=213.39.207.135 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=18743 DF PROTO=TCP SPT=4062 DPT=4662 WINDOW=64800 RES=0x00 SYN URGP=0 OPT (020405A001010402) Oct 28 21:35:17 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=194.25.2.129 DST=80.145.244.176 LEN=138 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=53 DPT=1493 LEN=118 Oct 28 21:35:18 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=212.40.229.71 DST=80.145.244.176 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=57248 DF PROTO=TCP SPT=56422 DPT=4662 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A00EB2DD40000000001030300) Oct 28 21:35:22 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.5.115.7 DST=80.145.244.176 LEN=138 TOS=0x00 PREC=0x00 TTL=57 ID=24525 PROTO=UDP SPT=53 DPT=1494 LEN=118 Oct 28 21:35:23 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.84.117.44 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=124 ID=53002 DF PROTO=TCP SPT=3615 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405A001010402) Oct 28 21:35:25 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.84.117.44 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=124 ID=53188 DF PROTO=TCP SPT=3615 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405A001010402) Oct 28 21:35:30 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=212.40.229.71 DST=80.145.244.176 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=57249 DF PROTO=TCP SPT=56422 DPT=4662 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080A00EB32840000000001030300) Oct 28 21:35:32 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=217.84.117.44 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=124 ID=53641 DF PROTO=TCP SPT=3615 DPT=4662 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405A001010402) Okt 28 21:35:43 linux su: (to root) jsmith on /dev/pts/2 Okt 28 21:35:43 linux su: pam_unix2: session started for user root, service su Okt 28 21:35:43 linux su: pam_unix2: session finished for user root, service su Okt 28 21:35:44 linux su: (to root) jsmith on /dev/pts/2 Okt 28 21:35:44 linux su: pam_unix2: session started for user root, service su Oct 28 21:35:46 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=213.39.207.135 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=20128 DF PROTO=TCP SPT=4134 DPT=4662 WINDOW=64800 RES=0x00 SYN URGP=0 OPT (020405A001010402) Oct 28 21:35:49 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=213.39.207.135 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=20258 DF PROTO=TCP SPT=4134 DPT=4662 WINDOW=64800 RES=0x00 SYN URGP=0 OPT (020405A001010402) Oct 28 21:35:55 linux kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=213.39.207.135 DST=80.145.244.176 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=20558 DF PROTO=TCP SPT=4134 DPT=4662 WINDOW=64800 RES=0x00 SYN URGP=0 OPT (020405A001010402)