At 07:23 PM 6/18/01 +0200, Jacques Nilo wrote:
>Dear Leaf fellows !
>I have been receiving in my syslog for the past few days this type if
>record:
>Jun 18 19:04:49 firewall kernel: Packet log: input DENY eth0 PROTO=6
>210.232.219.66:3377 195.132.172.176:25 L=44 S=0x10 I=24833 F=0x4000 T=95
>SYN (#45)
>The strange thing is that the destination adress which shows up in the
>log (195.132.172.176) is not my adress !
>My adress (as shown by ip addr show on the LRP box) is of the form
>195.132.172.XX/24 but XX is not 176.
>What is going on there ?? Any idea ??
Just a guess -- some other router thinks that your IP address
(195.132.172.XX) is its route to some network of the form 195.132.172.dd/yy,
where dd and yy take values that include 195.132.172.176 . Try traceouting
to 210.232.219.66 and see what close-to-you router might have this
misconfiguration present, then check with its admin. This might not work,
though, if, for example, somebody else on the same ISP network
(95.132.172.0/24) has a misconfigured router (since your system won't think
it is on its route to 210.232.219.66).
Without knowing more about your setup, it is hard to do more than guess. I'm
assuming, for example that you do not have a block of 195.132.172.dd/yy
addresses assigned to you, just the one you conceal as 195.132.172.XX .
--
------------------------------------"Never tell me the odds!"---
Ray Olszewski -- Han Solo
Palo Alto, CA [EMAIL PROTECTED]
----------------------------------------------------------------
_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/leaf-user
