Re: Console output?
From: Douglas G. Phillips (csdgp_at_eiu.edu)
Date: 09/03/04
- Previous message: Andreas Janssen: "Re: Console output?"
- In reply to: John Fleming: "Console output?"
- Next in thread: Raquel Rice: "Re: Console output?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
To: debian-user@lists.debian.org Date: Fri, 03 Sep 2004 16:15:12 -0500
"John Fleming" <john@wa9als.com> writes:
> Is this coming from my firewall (Firestarter) somehow? If so, why??
> 64.105.56.109 is my IP, but I don't know what the other one is 64.105.106.5)
Yes. Firestarter has iptables logging any denied access, and those logs are dumped
to the console. There's a way to change this, but I don't remember right now. I got
tired of it and wrote my own init script to set up IPTables (plus I know exactly what
my script does -- I get a little paranoid with my servers :) )
> IN=eth0) OUT= MAC= 00:c0:9f:38:15:eb:00:e0:eb:74:7f:C8:08:00:
> SRC=64.105.106.5 DST=64.105.56.109 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=9735
> DF PROTO=TCP SPT= 2074 DPT=135 WINDOW=65280 RES=0x00 SYN URGP=0
Port 135 is used for M$ windows -- probably a worm scanning for available (and
vulnerable) computers.
-- Douglas G. Phillips Distributed Computing Eastern Illinois University -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
- Previous message: Andreas Janssen: "Re: Console output?"
- In reply to: John Fleming: "Console output?"
- Next in thread: Raquel Rice: "Re: Console output?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]