When I attempt to ftp our server (192.139.75.6) it was taking up to
30 sec to connect. (It should take 2 sec) I turned on logging and this is
the output.
Nov 27 22:12:12 firewall kernel: Packet log: remote DENY eth0 PROTO=6
192.139.75.6:1083 192.139.75.156:113 L=60 S=0x00 I=19689 F=0x4000 T=63 SYN
(#10)
I went to http://www.echogent.com/cgi-bin/fwlog.pl
<http://www.echogent.com/cgi-bin/fwlog.pl> and this is what it told me.
A TCP packet to this port (113) is associated with the ident service. If
you're running this service on your firewall or on your LAN, with the
intention of offering external access to it, then your firewall may be
mis-configured. If you're *not* running this service, and have no idea what
it is, it's likely someone trying to take advantage of your system in some
manner. You may want to investigate 192.139.75.6 further and see if there's
an Administrative Contact there whom you could email this packet log to.
I am running Dachstein rc2. with Seawall 4.1. I have ftp_masq
enabled. Anyone have any ideas as to what is happening here?
Troy Aden
IT - Support/Training/Buyer
WaveCom Electronics Inc.
202 Cardinal Cres. Saskatoon, SK S7L 6H8
Phone: (306)955-7075 ext. 314
Fax: (306)955-7315
mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
http://www.wavecom.ca/ <http://www.wavecom.ca/>
_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
