On Tue, 20 Aug 2002, Mark Ivey wrote: > I just set up Bering 1.0 rc3, and I'm seeing lots (1500 the first day) of > rejected packets. A vast majority of these are coming from my firewall. I > followed the user guide & installation guide when I set it up, and so I went > back to double check that I didn't miss a step. I've also tried doing some > searches to figure out what these are and how to stop them, but the only > thing I've come up with is that it may have to do with dhcp. Can someone > tell me where to look? Or what the problem is? > > Here is the info from the weblet (by port): > hits port Service > 834 68 bootpc > 668 67 bootps > > Here is the info from the weblet (by ipaddress): > Hits IP-Adress Date > 834 192.168.1.254 Aug 20 > 586 192.168.1.4 Aug 20 > > Here is a sample of the entries from the log: > Aug 20 08:26:32 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1 > SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=38775 > DF PROTO=UDP SPT=67 DPT=68 LEN=308 > > Aug 20 08:27:36 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1 > SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=7128 > DF PROTO=UDP SPT=67 DPT=68 LEN=308 > > Aug 20 08:28:40 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1 > SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=25531 > DF PROTO=UDP SPT=67 DPT=68 LEN=308 >
Set the 'dhcp' option on eth1 in /etc/shorewall/interfaces!!! -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
