Very Computer

by **c.s.** » Mon, 24 Jun 2002 07:31:47

Hi,

I'm running the "Firestarter" firewall on Mandrake 8.2. and once
Firestarter is running I get hits on port 62827 EVERY SECOND!

the following message also fills up dmesg :

IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:03:47:d6:f5:e0:08:00
SRC=24.50.40.88 DST=255.255.255.255 LEN=72 TOS=0x00 PREC=0x00
TTL=128 ID=24666 PROTO=UDP SPT=1026 DPT=62827 LEN=52

Does anybody know what this means?

Help,
--chris

by **Jack S. La** » Mon, 24 Jun 2002 07:43:57

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

c.s.h. did go forth and write:

Quote:> Hi,

> I'm running the "Firestarter" firewall on Mandrake 8.2. and once
> Firestarter is running I get hits on port 62827 EVERY SECOND!

> the following message also fills up dmesg :

> IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:03:47:d6:f5:e0:08:00
> SRC=24.50.40.88 DST=255.255.255.255 LEN=72 TOS=0x00 PREC=0x00
> TTL=128 ID=24666 PROTO=UDP SPT=1026 DPT=62827 LEN=52

> Does anybody know what this means?

> Help,
> --chris

I can't remember what it means, but in rc.local I have:
iptables -t nat -A PREROUTING -i eth0 -d 255.255.255.255 -j DROP
to stop messages like that one:)
- --
Jack S. Lai - Senior Systems Analyst
http://www.datagraphinc.com
remove -kapu- from email - public key avail above
(Running Slackware 8.1)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9FP2Z9/VKdZrnv3YRAnvzAJ95NttsuGM5lDdMIOe0TdIy6Q6fRwCdEjCl
zQsodmefL8HyU3LoVZDTzL4=
=iluT
-----END PGP SIGNATURE-----

Very Computer

continuous firewall hits to port 62827 ??

continuous firewall hits to port 62827 ??

continuous firewall hits to port 62827 ??