in the last few days i got several request on my firewall box like:
Apr 4 17:22:58 router kernel: Packet log: input DENY ippp0 PROTO=6 xxx.xxx.xxx.xxx::3737 xxx.xxx.xxx.xxx:515 L=60 S=0x00 I=21162 F=0x4000 T=48 SYN (#37)
what the hell is that? in /etc/services i found:
printer 515/udp # spooler
so is someone trying to "print" something on my printer or what???
Yes... lprng of other distributions was susceptible to some security-related bugs. You may have been attacked, but it's good practice that you use some packet filter. :-/
Jan
Thanks,
Roman.
--
- -
| Roman Drahtmüller