Hello!

Below is the one line (iptables' log)of my /var/log/messages:
--------------
Jun  6 11:55:45 concord Dropped incoming: IN=ppp0 OUT=eth0
SRC=212.42.96.15 DST=192.168.0.250 LEN=64 TOS=0x00 PREC=0x00 TTL=61
ID=18896 DF PROTO=TCP SPT=110 DPT=25390 WINDOW=65535 RES=0x00 ACK SYN
URGP=0
-------------
Could anybody shortly explain me what it means??
My understanding is: Packets' destination is 192.168.0.250, comes into
ppp0 and then trough eth0 goes to 192.168.0.250. These packets are
dropped by firewall, i.e. not allowed to come in.
ppp0 - is the 1st interface of the server connected to the adsl modem
eth0 - second interface of the server
192.168.0.250 -  ip adress of the pc in lan.
But I can't understand if these packets are the reply to my request
from pc with 192.168.0.250 ip address or someone trying to intrude my
system?

Thanks in advance.

askar

-- 
[email protected] mailing list

Reply via email to