well, to increase the oddness of this there wasnt anything printing and
hadnt been anything since the day before all these entries showed up. Also,
looking back over the logs for the past two weeks or so this is the only
time that these types of entries have appeared.
It also dosent explain the entries fron all those different ip#s attempting
to contact my port 53 which if i understand the /etc/services file right is
the normal port for the nameserver.
I have also been keeping a closer check on all the logs since i noticed this
and everything looks like it is running normally now. No more attempts to
connect to port 631 or 53.
Many thanks for all replies,
Ian K. Harrell
[EMAIL PROTECTED]
PS - Still puzzled about what caused this, maybe it is computer code for a
vacation request? *G*
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Mark Weaver
Sent: Sunday, February 11, 2001 10:56 PM
To: [EMAIL PROTECTED]
Subject: Re: [newbie] unusual syslog entries can someone help?
Fireman71 wrote:
>
> was checking my /var/log/messages file earlier and noticed some unusual
> stuff and thought i would send it out and see what you all thought....
>
> /var/log/messages #1
> Feb 11 04:03:02 hp1 kernel: Packet log: input DENY ppp0 PROTO=17
> 207.144.156.152:631 255.255.255.255:631 L=117 S=0x00 I=63299 F=0x0000 T=64
> (#34)
Ian,
it looks to me like you don't have your printer setup correctly cause
all the info that is being sent to the printer is hitting your firewall
and getting sent to /dev/null.
--
Mark
"If you don't share your concepts and ideals, they end up being
worthless,"
"Sharing is what makes them powerful."
