Mailinglist Archive: opensuse-security (465 mails)

< Previous Next >
Re: [suse-security] Connect to Port 0
  • From: Peter Wiersig <wiersig@xxxxxxxxx>
  • Date: Mon, 3 Dec 2001 17:48:57 +0100
  • Message-id: <200112031647.RAA32252@xxxxxxxxxxxxx>
On Monday, 3. Dezember 2001 17:10 wrote "Georg":

> as far as I know Ports 8 and 0 are unassigned. What does the following =
> entry in /var/log/firewall mean?
>
> Dec 1 11:02:12 inet kernel: Packet log: input ACCEPT eth1 PROTO=3D1 =
> 131.246.137.5:8 a.b.c.d:0 L=3D1500 S=3D0x00 I=3D19222 F=3D0x4000 T=3D242 =
> (#15)
>
> The firewall should block this connect. We are using Suse 7.1 with =
> standard firewall configuration.
> Access is allowed only on smtp, www and https.

Which are all tcp-based protocols as opposed the logged packet which is ICMP.
ICMP don't have ports so the ipchains-module logs icmp-type as ports (here:
echo -> echo_reply)

Your mailer is broken. I can't see any header relating to quoted-printable
while the content is.

Peter

< Previous Next >
This Thread
References