Dear my friend Ian....
Could you tell me mo detail about the steps?
If I want to allow this IP (145.253.2.196), what
should I do?
What is the name and the port number of DNS
translation in "/etc/services"? I thought that is 53,
am I wrong?
--- Ian David Laws
On Friday 28 February 2003 13:54, Prabu Subroto wrote: SuSE-FW-ILLEGAL-TARGET IN=ippp0 OUT= MAC= SRC=145.253.2.196 DST=145.254.88.223 LEN=96 TOS=0x00 PREC=0x00 TTL=247 ID=38391 DF PROTO=UDP SPT=53 DNS DPT=1096 Common Name Resolution Protocol LEN=76
SPT=53 DPT=1096 If you look hear you are receiving a DNS translation if you look up the 2 ports in /etc/services. The SRC ip address seems to external ISP but with nslookup I cannot find this address. If that ip is legal then allow this ip to come in for DNS.
Hopefully this will help you further
Ian
__________________________________________________ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/