Erwin Lam
On Mon, 1 Apr 2002, Alan Hadsell wrote:
You also need to set
FW_SERVICES_EXT_UDP="bootpc"
Yep, did that, and it fixed the problem. Thanks.
"John Trickey"
What I can't figure out is how this message is winding up in the INPUT table, which is where the anti-spoofing rules are.
There is no major deal here. DST is a broadcast address and your interface will see its own broadcast. If you run samba you would see the netbios broadcasts to the local broadcast address, 64.255.255.255 if it is a Class A or look at ifconfig to see what you're using.
Indeed, I figured this out after about 3 hours of banging my head against the wall. This message is a red herring; it's not the source of the problem.
I don't run SuSEFirewall so I cannot advise of any action to take. On my firewall I detect valid broadcasts on the LAN interface using --mac-source and quietly drop them.
Given the amount of other noise coming from various port scans, an occasional message like this is no big deal. Thank you for your help. -- Alan Hadsell "Whatever does not kill me makes me stranger".