May 30, 2002 04:57 am,Mark D. Weaver wrote:
<snip>
> Charles,
>
> Try setting up a rule on the INPUT chain to allow your ISP to
> communicate with your named server and see if this clears up. I had the
> same situation before, however my log entries differed somewhat from
> yours. I'm not completely sure that this is the case for you. I don't
> recall seeing that the packets were showing up on the PUB_IN chain,
> unless thats the way you've got it setup on purpose.
>
> iptables -A INPUT -p udp --dport 53 -s 24.70.95.195 -j ACCEPT
> iptables -A INPUT -p tcp --dport 53 -s 24.70.95.195 -j ACCEPT
>
> You can add these two rules from the command line as root and then watch
> your syslog to see if the kernel continues to log or not.
>
> Mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks Mark, I'll try it at once. As to this being setup this way on purpose 
no, it isn't... I don't think. :-) All I did was run InteractiveBastille from 
the console and what I chose was mostly defaults. I didn't even go through 
the advanced networking section when I ran it since there's no network 
running here other than the cable modem. 

I appreciate an answer that made an effort to analyze what was happening 
rather than the "RTFM" that I basically got from one person on my local LUG. 
I've been reading the fscking manual since I saw this first in my logs and 
couldn't figure out why it was suddenly happening. I haven't done anything 
differently than I had done in the past.

>From what I can tell there is something weird happening with my ISP since the 
primary DNS server actually got blocked twice yesterday. When I called they 
said "no problems here, are you sure about those log entries?" Whatever was 
going on there is no longer a concern since the entries stopped and I have no 
connection problems.

See why I said it was confusing? Maybe a result of the MS-SQL Snake? 

Thank you again;
-- 
Charlie
Edmonton,AB,Canada
Registered user 244963 at http://counter.li.org

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to