Mailinglist Archive: opensuse-security (465 mails)

< Previous Next >
Re: [suse-security] Re: request for help with log entries
  • From: Wieland Gmeiner <e8607062@xxxxxxxxxxxxxxxxxxxx>
  • Date: Thu, 6 Dec 2001 19:59:30 +0100 (MET)
  • Message-id: <Pine.GHP.4.32.0112061934420.3845-100000@xxxxxxxxxxxxxxxxxx>
On Thu, 6 Dec 2001, Johannes Geiger wrote:
> Hello Wieland Gmeiner,
> On Thu, Dec 06, 2001 at 03:55:10PM +0100, Wieland Gmeiner wrote:
> > > On Wed, Dec 05, 2001 at 07:04:36PM +0100, Wieland Gmeiner wrote:
> > > > Strange. I don't have a machine 192.168.100.1 .
> > > >
> > > > So what is going on here?
> > >
> > > Just guessing: Do you use a cable modem?
> >
> > You are right, I use a cable modem.
> > Please let me know your further interpretation.
>
> 192.168.100.1 might be the IP-address of your cable modem. To verify
> eg. type http://192.168.100.1/ in your browser.

You are right again. So, if I got it right, my cable modem is
sending multicast datagrams which are dropped by SuSEfirewall2 ?
Why is it doing this? Is this default behaviour or misconfiguration?
And what is this MAC adress (?) about?
/var/log/firewall:
[...]
Dec 6 19:53:09 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
[...]

> HTH
it does, indeed
> Johannes
thanks,
wieland


< Previous Next >
References