Quoting jerome ([EMAIL PROTECTED]):
> On Wednesday 19 March 2003 21:44, Sherwin T. Ang wrote:
> > is your ethernet running in promiscuous mode?
>
> no...
Then, all you have is a packet that showed up at your Linux host's
ethernet interface with a source packet that makes no sense and is
invalid in that context.
If your machine is on the inward side of a filtering router ("firewall"),
then you should add rulesets to the filtering router that drop & log
packets that are addressed either from or to nonsensical addresses
(broadcast addresses, RFC 1918 private-IP addresses, etc.). Any
properly configured filtering router should already do this!
If your machine, like mine, is fully exposed to the public Internet,
then you can realistically expect to get bizarre, invalid packets thrown
at it _all the time_. Welcome to the Internet! Your machine will be
pummelled by invalid/malformed packets, attempts to find and exploit
known vulnerabilities in in popular software, many times each and every
day.
--
Cheers, "Not using Microsoft products is like being a non-smoker
Rick Moen 40 or 50 years ago: You can choose not to smoke, yourself,
[EMAIL PROTECTED] but it's hard to avoid second-hand smoke." -- M. Tiemann
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph
To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL
PROTECTED]
