It's not a big deal, just some folks attempting to connect to various
ports on your router -- it means that your LEAF box is doing it's job,
nothing to worry about.

-arif

On Tue, 2002-09-03 at 14:57, Joris Kempen wrote:
> Hi people,
> 
> After a day of running my Dachstein box I get this message:
> 
> :: Firewall Status ::
> Tue Sep 3 21:53:13 UTC 2002
> 
> firewall Firewall Status: warn
> 
> You have 19 denied or rejected packets in your recent packet logs.
> 
> See the messages log files for details
> 
> Message log:
> 
> :: messages.0 ::
> Sep 2 06:42:05 firewall syslogd 1.3-3#31.slink1: restart.
> Sep 2 07:50:37 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 217.33.6.26:2029 217.121.66.46:80 L=44 S=0x00 I=10601 F=0x4000 T=114 SYN
> (#40)
> Sep 2 07:50:40 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 217.33.6.26:2029 217.121.66.46:80 L=44 S=0x00 I=39018 F=0x4000 T=114 SYN
> (#40)
> Sep 2 08:05:27 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 211.155.23.51:21 217.121.66.46:21 L=40 S=0x00 I=8806 F=0x0000 T=108 SYN
> (#40)
> Sep 2 12:23:22 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 62.245.160.201:3439 217.121.66.46:21 L=48 S=0x00 I=46560 F=0x4000 T=115 SYN
> (#40)
> Sep 2 12:23:25 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 62.245.160.201:3439 217.121.66.46:21 L=48 S=0x00 I=46700 F=0x4000 T=115 SYN
> (#40)
> Sep 2 12:36:58 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 61.133.87.165:21 217.121.66.46:21 L=40 S=0x00 I=2426 F=0x0000 T=119 SYN
> (#40)
> Sep 2 16:38:55 firewall -- MARK --
> Sep 2 19:26:58 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 63.230.42.233:2434 217.121.66.46:22 L=60 S=0x00 I=29560 F=0x4000 T=41 SYN
> (#40)
> Sep 2 19:27:10 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 63.230.42.233:2434 217.121.66.46:22 L=60 S=0x00 I=30078 F=0x4000 T=41 SYN
> (#40)
> Sep 2 19:27:34 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 63.230.42.233:2434 217.121.66.46:22 L=60 S=0x00 I=30604 F=0x4000 T=41 SYN
> (#40)
> Sep 3 00:38:55 firewall -- MARK --
> Sep 3 04:38:55 firewall -- MARK --
> 
> 
> 
> :: messages ::
> Sep 3 06:42:06 firewall syslogd 1.3-3#31.slink1: restart.
> Sep 3 08:16:16 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 203.212.5.8:22 217.121.66.46:22 L=40 S=0x00 I=39070 F=0x0000 T=111 SYN (#40)
> Sep 3 08:27:27 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 61.151.254.27:1584 217.121.66.46:21 L=60 S=0x00 I=7460 F=0x4000 T=44 SYN
> (#40)
> Sep 3 08:27:30 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 61.151.254.27:1584 217.121.66.46:21 L=60 S=0x00 I=7461 F=0x4000 T=44 SYN
> (#40)
> Sep 3 08:29:24 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 202.234.165.178:21 217.121.66.46:21 L=40 S=0x00 I=33463 F=0x0000 T=111 SYN
> (#40)
> Sep 3 11:13:51 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 210.243.215.193:21 217.121.66.46:21 L=40 S=0x00 I=39426 F=0x0000 T=17 SYN
> (#40)
> Sep 3 14:24:47 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 217.218.226.130:2874 217.121.66.46:80 L=44 S=0x00 I=6155 F=0x4000 T=107 SYN
> (#40)
> Sep 3 14:24:49 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 217.218.226.130:2874 217.121.66.46:80 L=44 S=0x00 I=4108 F=0x4000 T=107 SYN
> (#40)
> Sep 3 16:38:55 firewall -- MARK --
> Sep 3 17:32:18 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 212.68.218.59:3630 217.121.66.46:21 L=48 S=0x00 I=54636 F=0x4000 T=114 SYN
> (#40)
> Sep 3 17:32:21 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 212.68.218.59:3630 217.121.66.46:21 L=48 S=0x00 I=54971 F=0x4000 T=114 SYN
> (#40)
> Sep 3 17:32:27 firewall kernel: Packet log: input DENY eth0 PROTO=6
> 212.68.218.59:3630 217.121.66.46:21 L=48 S=0x00 I=55216 F=0x4000 T=114 SYN
> (#40)
> Sep 3 20:38:55 firewall -- MARK --
> 
> Maybe a little stupid to post this here, but I don't have a clue what this
> al means.
> 
> Is there a setting wrong on my setup, or is some one scanning me or
> something??
> 
> Thanks for any help.
> 
> Grtz. Joris
> 
> Met vriendelijke groet,
> 
> Joris Kempen
> St. Ursulahof 47
> 5995 CB Kessel
> 
> email:     [EMAIL PROTECTED]
> tel. nr.:  06 1257 4228
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
> ------------------------------------------------------------------------
> leaf-user mailing list: [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html





-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to