Hello Rob > Hello, > > Looking at my firewall via the webbrowser I have the following situation within the >current connections: > > Masqueraded Connections:: > udp src=192.168.1.44 1276 dst=194.109.6.65 123 --90 sec. > unknown src=599 dst=10.0.0.138 dst=src=10.0.0.2 src=10.0.0.138 --47 sec. use=1 > tcp src=192.168.1.44 2010 dst=65.197.157.202 80 --74882 sec. ESTABLISHED > tcp src=192.168.1.97 1116 dst=208.254.63.58 80 --60133 sec. ESTABLISHED > > I understand the connection to the dns server and the connection between firewall >and adsl modem, but i don't understand the other two connections. > > Those ip-numbers seem to have a connection for a very, very long time. My question: >is this normal behaviour or is there something wrong? > > Rob. Take a look at your box with shorewall show connections The second row "unknown....." is certainly incorrect. The weblet takes the information from the shorewall connections show and changes it to make the information more tight. Unfortunately the script isn't perfect ( mea culpa) So special connections show up in a wrong form. The connection from 10.0.0.138 to 10.0.0.2 could for example be a tunneled connection.
The first is a connection from a internal host to a time server in the external zone the server is fistix.xs4all.nl and this seems to be a time server (at least it asnwered my time requests) is 192.168.1.44 a win2k box The last two are connections with a www.server : world.chess.Federation and the other some ISS server. The timeout from established connections is rather long. If you however stop serving this page the connection is lost faster as it times suggests. Regards Eric Wolzak member of the bering Crew ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
