Re: [expert] And the fun continues

[Tibbetts, Ric]

Mark Weaver wrote:

Tibbetts, Ric wrote:

Mark Weaver wrote:

On Wednesday 15 January 2003 10:57 am, Tibbetts, Ric scribbled
nervously:

Sheesh!
NOW, the server (firewall side) is just bulk rejecting ALL

connections

(again!). It considers any incoming mail as a SYN attack, and

rejects

it! (egads! I'm getting tired of this chase!). I thought I had this
sorted out...

/var/log/messages is bing filled with messages like:

[snip]

It's all incoming mail, that is not coming in!

Any thoughts on WHY it would interpret all incoming connections as

an

attack? Anything not already blocked is interpreted as a SYN attack,

and

is rejected, and added to the list....

Thanks !

Ric

Ric,

do yourself a huge favor and turnoff and uninstall PortSentry. He's a
tired old man with a serious bladder control problem. he sh*ts

himself

from
time to time as well. do that and you should be feeling a lot better.

Mark (anyone);
At what point in your startup is iptables starting (remember that my rcx.d directories got trashed). I'm missing something, and I need to figure out what!

Any help is greatly appreciated!!!

Ric

Ric,

as I recall its rather early in the boot process. i'll check and then
repost what I find.

Mark

Of interest on this one.
If I put iptables back into the startup (chkconfig --add iptables). It gets added at the top (S03 I think).
Then if I reboot, it changes to

K92iptables -> ../init.d/iptables

Ric


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com