Mailinglist Archive: opensuse-security (375 mails)

< Previous Next >
Re: [suse-security] What means "martian source"?
  • From: <defunct@xxxxxxxxxxxxxxx>
  • Date: Mon, 30 Sep 2002 06:02:33 -0400
  • Message-id: <20020930100233.BE2ABFFD6@xxxxxxxxxxxxxxxxxx>
this is a FAQ:

http://www.susesecurity.com/faq/ :

What does "kernel: martian source aabbccdd for 11223344, dev eth0" mean?
--
These are packets that Linux does not expect from the direction they came from (i.e. packets from internal hosts coming in on the external interface). The cause is probably a misconfigured machine on your LAN.

You can turn off logging those packets via
/proc/sys/net/ipv4/conf/*interface*/log_martians
which is documented in /usr/src/linux/Documentation/proc.txt






< Previous Next >