Hello all,

Running Etch amd64.

I just found this in my logwatch:

 --------------------- iptables firewall Begin ------------------------ 
 
 Listed by source hosts:
 Rejected 4 packets on interface ppp0
    From 209.29.44.21 - 4 packets
       To 207.246.138.125 - 1 packet
          Service: 81 (tcp/81) (Shorewall:fw2net:REJECT:) - 1 packet
       To 207.246.138.137 - 1 packet
          Service: 81 (tcp/81) (Shorewall:fw2net:REJECT:) - 1 packet
       To 207.246.138.139 - 1 packet
          Service: 81 (tcp/81) (Shorewall:fw2net:REJECT:) - 1 packet
       To 207.246.138.140 - 1 packet
          Service: 81 (tcp/81) (Shorewall:fw2net:REJECT:) - 1 packet
 
 ---------------------- iptables firewall End ------------------------- 


And this is what I found in /var/log/syslog:

Apr 10 22:38:10 titan kernel: Shorewall:fw2net:REJECT:IN= OUT=ppp0
SRC=209.29.44.21 DST=207.246.138.125 LEN=60 TOS=0x00 PREC=0x00 TTL=64
ID=34903 DF PROTO=TCP SPT=54446 DPT=81 WINDOW=5840 RES=0x00 SYN URGP=0 

Apr 10 22:38:10 titan kernel: Shorewall:fw2net:REJECT:IN= OUT=ppp0
SRC=209.29.44.21 DST=207.246.138.137 LEN=60 TOS=0x00 PREC=0x00 TTL=64
ID=31888 DF PROTO=TCP SPT=54278 DPT=81 WINDOW=5840 RES=0x00 SYN URGP=0 

Apr 10 22:38:10 titan kernel: Shorewall:fw2net:REJECT:IN= OUT=ppp0
SRC=209.29.44.21 DST=207.246.138.139 LEN=60 TOS=0x00 PREC=0x00 TTL=64
ID=38355 DF PROTO=TCP SPT=50574 DPT=81 WINDOW=5840 RES=0x00 SYN URGP=0 

Apr 10 22:38:10 titan kernel: Shorewall:fw2net:REJECT:IN= OUT=ppp0
SRC=209.29.44.21 DST=207.246.138.140 LEN=60 TOS=0x00 PREC=0x00 TTL=64
ID=20562 DF PROTO=TCP SPT=53783 DPT=81 WINDOW=5840 RES=0x00 SYN URGP=0 


It seems to have been something from my box (fw) out to the net.

I'm on dialup.  I don't see port 81 in /etc/services.

Any ideas?  

Thanks 
Doug.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to