Mailinglist Archive: opensuse-security (465 mails)

< Previous Next >
Re: [suse-security] request for help with log entries
  • From: Ray Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx>
  • Date: Wed, 5 Dec 2001 18:36:53 +0200
  • Message-id: <20011205163434.0B243E63DD@xxxxxxxxxxxx>
On Wed 05 Dec 01 18:21, Wieland Gmeiner wrote:
> Dear list!
>
> I can't figure out the meaning of entries in
> /var/log/firewall :
> [...]
> Dec 5 00:20:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> Dec 5 00:23:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> Dec 5 00:26:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> Dec 5 00:29:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> Dec 5 00:32:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> Dec 5 00:35:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> Dec 5 00:38:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> Dec 5 00:41:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> Dec 5 00:44:07 w1 kernel: SuSE-FW-UNALLOWED-TARGETIN=eth0 OUT=
> MAC=01:00:5e:00:00:01:00:20:40:e5:b4:35:08:00 SRC=192.168.100.1
> DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2
> [...]
>
It seems like your machine at 192.168.100.1 is trying to contact machine at
224.0.0.1 and is being denied by the firewall.


> So I request if you kindly could help me.
> I use SuSE 7.2 professional with kernel 2.4.4 and SuSEfirewall2.
>
> TIA,
> Wieland

< Previous Next >
Follow Ups
References