[leaf-user] Bering, Diagnosing Weblet LRP status warnings

[Brian Miller SMITH]

I have the following message

Thu Feb 6 09:49:28 UTC 2003

firewall Firewall Status: error

You have 438 denied or rejected packets in your recent packet logs.

See the messages in the log files for details
Or check the hits sorted by port or by IP adress


and when I look at the log file this is what it has (excerpt)

Feb 6 08:31:05 firewall kernel: Shorewall:net2all:DROP:IN=eth0 OUT= MAC=00:60:08:08:6d:f3:00:03:4b:ab:10:0e:08:00 SRC=144.134.250.37 DST=203.217.17.249 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=41523 DF PROTO=TCP SPT=1146 DPT=3511 WINDOW=8192 RES=0x00 SYN URGP=0
Feb 6 08:31:08 firewall kernel: Shorewall:net2all:DROP:IN=eth0 OUT= MAC=00:60:08:08:6d:f3:00:03:4b:ab:10:0e:08:00 SRC=144.134.250.37 DST=203.217.17.249 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=45107 DF PROTO=TCP SPT=1146 DPT=3511 WINDOW=8192 RES=0x00 SYN URGP=0

sorted by port

hits port Service
42 1080
28 8080 webcache
28 6552
28 23 telnet


sorted by ip address

Hits IP-Adress Date
406 193.163.220.4 Feb 6
7 24.192.28.48 Feb 6
6 202.129.102.26 Feb 6
6 144.134.250.37 Feb 6
4 192.168.1.254 Feb 6
3 24.123.122.189 Feb 6
3 203.59.187.164 Feb 6
3 203.45.122.188 Feb 6



what does it mean?? am i being attacked or is it something in shorwall that I have not configured properly?

Ta








_________________________________________________________________
Tired of spam? Get advanced junk mail protection with MSN 8. http://join.msn.com/?page=features/junkmail



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html