Re: Logcheck warning: UDP packet from outside my network?

From: Matthijs (vanaalten_at_hotmail.com)
Date: 06/04/04

  • Next message: Richard Cole: "fixed 10 font problem" 
    Date: Fri, 04 Jun 2004 20:52:53 +0200
To: debian-user@lists.debian.org

    On Fri, 04 Jun 2004 19:50:10 +0200, Paul Johnson <baloo@ursine.ca>
    wrote:

    > Matthijs <vanaalten@hotmail.com> writes:
    >
    > > Jun 4 07:30:54 MyMail kernel: UDP: short packet: 24.5.180.234:10030
    > > 2167/119 to 192.168.1.2:10768
    > >
    > > I'm not really interested in what these packets are for (I guess some
    > > kind of worm/DoS related packets), but I'm more interested in the
    > > source of the packets: 24.5.180.234 is *outside* my network.
    >
    > So? Some applications use UDP instead of TCP, what's the problem with
    > that?

    I've got no problem at all with packets using UDP or TCP - my problem
    was that they seem to originate from *outside* my network, while I
    thought my system was shielded with a hardware firewall.

    According to a post from Bojan Baros, I thought wrong here: it's
    likely (haven't tested it yet) that my firewall doesn't protect me
    from UDP-packets. 

    -- 
Matthijs
vanaalten@hotmail.com
-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Richard Cole: "fixed 10 font problem"

    Relevant Pages

    • Re: UPD better than TCP in streaming video/audio ?
      ... > UDP gains speed over TCP because it carries no information that would ... it doesn't even know that packets were lost. ... which is perfect for UDP. ... > Finally, there's the possibility of multicast data - for instance, a live ...
      (microsoft.public.win32.programmer.networks)
    • Re: NTP and Firewall help needed.
      ... >>port 123 for udp and tcp. ... The action here is applied for packets that fall off ... > - ACCEPT any and all traffic coming from the localhost interface ...
      (comp.os.linux.setup)
    • Re: Old SUN NFS performance papers.
      ... > also just generally a good idea, since UDP frags act as a fixed ... > you may be copying all your packets over again ), ... With TCP, you ... >> FreeBSD NFS servers, and therefore always looking for tweaks and nobs ...
      (freebsd-performance)
    • Re: NTP and Firewall help needed.
      ... >port 123 for udp and tcp. ... Also the idea of combining rules for packets arriving at the local machine ... ACCEPT any and all traffic coming from the localhost interface ...
      (comp.os.linux.setup)
    • Re: UDP vs TCP
      ... I understand that UDP doesn't guarantee proper delivery of the message, that's why we have to add the CRC to the message to check if the message received is correct. ... TCP for instance will break up a large packet into smaller ... > into the packets and then the receiving app would have to read ...
      (microsoft.public.vb.enterprise)