afternoon all,
I have the telnet port open in IPCHAINS but hosts.allow lets only a
few connect and the rest gets "send" to hosts.deny.
BUT now I saw a weird entry in my logs:
Apr 10 00:21:21 piquet kernel: Packet log: ppp0-in DENY ppp0 PROTO=6
203.161.231.1:1532 203.63.73.52:53 L=60 S=0x10 I=49912 F=0x4000 T=44 SYN (#33)
Apr 10 00:21:24 piquet kernel: Packet log: ppp0-in DENY ppp0 PROTO=6
203.161.231.1:1532 203.63.73.52:53 L=60 S=0x10 I=50325 F=0x4000 T=44 SYN (#33)
Apr 10 00:38:19 piquet kernel: Packet log: ppp0-in DENY ppp0 PROTO=6 163.29.17.77:1316
203.63.73.52:53 L=60 S=0x10 I=38154 F=0x4000 T=46 SYN (#33)
and as you can see its from different machines too!
Can anybody please shed some light on this one?
jobst
--
Share your knowledge. It's a way to achieve immortality.
| __, Jobst Schmalenbach, [EMAIL PROTECTED], Technical Director|
| _ _.--'-n_/ Barrett Consulting Group P/L & The Meditation Room P/L |
|-(_)------(_)= +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia|
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
