On Tue, 20 Aug 2002, Mark Ivey wrote:

> I just set up Bering 1.0 rc3, and I'm seeing lots (1500 the first day) of
> rejected packets.  A vast majority of these are coming from my firewall.  I
> followed the user guide & installation guide when I set it up, and so I went
> back to double check that I didn't miss a step.  I've also tried doing some
> searches to figure out what these are and how to stop them, but the only
> thing I've come up with is that it may have to do with dhcp.  Can someone
> tell me where to look?  Or what the problem is?
> 
> Here is the info from the weblet (by port):
> hits      port    Service
> 834     68      bootpc
> 668     67      bootps
> 
> Here is the info from the weblet (by ipaddress):
> Hits      IP-Adress              Date
> 834      192.168.1.254       Aug 20
> 586      192.168.1.4           Aug 20
> 
> Here is a sample of the entries from the log:
> Aug 20 08:26:32 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1
> SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=38775
> DF PROTO=UDP SPT=67 DPT=68 LEN=308
> 
> Aug 20 08:27:36 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1
> SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=7128
> DF PROTO=UDP SPT=67 DPT=68 LEN=308
> 
> Aug 20 08:28:40 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1
> SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=25531
> DF PROTO=UDP SPT=67 DPT=68 LEN=308
> 

Set the 'dhcp' option on eth1 in /etc/shorewall/interfaces!!!

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ [EMAIL PROTECTED]



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to