On 3/31/2015 1:04 PM, Marko Weber | 8000 wrote: > > hello list, > > kernel: Shorewall:_net-fw::IN=eth0 OUT= > MAC=d4:3d:7e:ec:e1:07:00:26:88:75:df:19:08:00 SRC=87.142.17.90 > DST=46.4.xx.xxx LEN=80 TOS=0x00 PREC=0x00 TTL=55 ID=38334 PROTO=ICMP > TYPE=3 CODE=1 [SRC=46.4.xx.xxx DST=87.142.17.90 LEN=52 TOS=0x00 > PREC=0x00 TTL=53 ID=4374 DF PROTO=TCP SPT=80 DPT=56578 WINDOW=521 > RES=0x00 ACK FIN URGP=0 ] > > > i find this entries in my logs. > What does this mean? I dont understand at all. A client connects via > http on port 80, then webserver is checking if client is reachable on > his outgoing port of his request? > > Can some help me to read this correct or interpret this correct?
46.4.xx.xxx is in the process of closing an HTTP connection from 87.142.17.90 and sent a FIN/ACK packet. Some host between the two endpoints is returning a 'host-unreachable' ICMP in response to that packet. I would have to see the output of 'shorewall show net-fw' to understand why these are being logged. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
