I'm not sure if this would be useful for you, but try plugging the info you sent into this webpage:
http://logi.cc/linux/NetfilterLogAnalyzer.php3 Francisco Neira did pen these words on 4/10/02 at 4:12 PM >Hi all, > >Could someone please explain me or reference what those square brackets >mean? 172.10.1.60 is a masked SMTP server (as 200.37.247.3) behind the >firewall. Why a ICMP after a SMTP attempt? I don't get it. > >IN=eth1 OUT=eth0 SRC=209.220.116.254 DST=172.10.1.60 LEN=56 TOS=0x00 >PREC=0x00 TTL=10 ID=8530 PROTO=ICMP TYPE=11 CODE=0 [SRC=200.37.247.2 >DST=208.36.88.75 LEN=44 TOS=0x00 PREC=0x00 TTL=1 ID=8122 DF PROTO=TCP >SPT=3551 DPT=25 WINDOW=4352 RES=0x08 ACK FIN URGP=0 ] > >Regards, > >Francisco > > > > >_______________________________________________ >Redhat-list mailing list >[EMAIL PROTECTED] >https://listman.redhat.com/mailman/listinfo/redhat-list Mark McKibben [EMAIL PROTECTED] http://www.avalon.net/~manzabar ICQ# 8476502 Experience is that marvelous thing that enables you recognize a mistake when you make it again. - Unknown _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list