The 03.05.21 at 15:15, Tom Nielsen wrote:
Well, I'm starting this again. Everyday for...well, a long time, I get this message in my /var/log/message log:
May 21 14:29:18 fwpc kernel: Packet log: output REJECT eth0 PROTO=17 10.10.10.10:61001 198.162.0.1:137
This message comes from my firewall box which is running RedHat 7.0 and IPchains. 10.10.10.10. is my firewall's eth0 and is my external interface. 192.168.0.1 is my firewall's internal IP. All the machines on my network are Win2k - except mine - SuSE 8.2.
My guess is that the firewall is rejecting connection to "NETBIOS Name Service" coming from the outside to the inside - and that is as it should be, I think -. The strange thing is why is it not rejected directly at the entry point, before routing it, but that I can not answer. Probably the windows machines on your internal network are broadcasting and being rejected, or somebody on the outside is probing. -- Cheers, Carlos Robinson