On Tue, 03 Sep 2002 17:51:24 EST Matthew Schneider wrote:
> I am using a Dachstein LEAF Firewall and have a question about denied > packets. Within the last 12 or so hours the firewall has logged over 8,000 > denied packets. This has been going on for a while. In the weblet status > monitor, the indicators for the firewall and disk status both change to > error within a few hours. Is this normal? 8000 denied packets in 12 hours seems pretty high. My RoadRunner cable connection averages < 200 dropped packets per day. > Is there any way to limit the size > of the log file or prevent these from being logged all together? The > majority of them are coming from within our local cable modem subnet > (208.180.xxx.xxx). Many also come from private address (192.168.0.xxx). All > are on the external Ethernet adapter (eth0). If you have identified some of the traffic as non-threatening and want to silently deny certain things, check out the SILENT_DENY variable in /etc/network.conf . > I am also having a problem with the DHCP server for my internal network. > After a while, it stops responding to DHCP requests. Could this be related > to my first problem? It doesn't seem like they would be, but I might be overlooking something. Reducing the noise in the logs might make any dhcpd error messages in them more obvious though. Is dhcpd still running when you have the problems? (You can use "ps | grep dhcp" to find out.) You may also check /var/state/dhcp/dhcpd.leases to see if it reveals anything obvious, e.g. that you've handed out all available leases. --Brad > Any information would be appreciated. > > Matthew Schneider > > (P.S.) I am on the Cox Express cable system using a Linksys Etherfast cable > modem if that makes any difference. ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
