>This has been showing up a lot in my kernel log lately. It raises a couple
>questions:
>
>1) What is it rejecting? There is nothing before or after it that would
>suggest a provocation from elsewhere. It also only happens when my Windex
>machine is on. FYI, the destination IP is my ISP's DNS server.
It's rejecting your box's attempt to tell the remote computer
(24.221.30.4) that the port it tried to connect to is unavailable. You
might want to review your firewall rules and make sure you have them set
up correctly. 'man ipchains' and pay particular attention to the -y
flag.
> 2) How do I get syslog to make a separate log file for ipchains logs?
That's a good question.
>Thanks,
>Drew
>
>Kernel entries:
>
>Nov 20 14:34:59 tenchi kernel: Packet log: output REJECT eth0 PROTO=1
>24.221.123.186:3 24.221.30.4:3 L=56 S=0x00 I=12811 F=0x0000 T=127 (#50)
>Nov 20 16:09:02 tenchi kernel: Packet log: output REJECT eth0 PROTO=1
>24.221.123.186:3 24.221.30.4:3 L=92 S=0xC0 I=5514 F=0x0000 T=255 (#50)
>Nov 20 16:09:07 tenchi kernel: Packet log: output REJECT eth0 PROTO=1
>24.221.123.186:3 24.221.30.3:3 L=92 S=0xC0 I=5515 F=0x0000 T=255 (#50)
>Nov 20 16:09:10 tenchi kernel: Packet log: output REJECT eth0 PROTO=1
>24.221.123.186:3 24.221.30.4:3 L=92 S=0xC0 I=5516 F=0x0000 T=255 (#50)
>Nov 20 16:09:15 tenchi kernel: Packet log: output REJECT eth0 PROTO=1
>24.221.123.186:3 24.221.30.3:3 L=92 S=0xC0 I=5517 F=0x0000 T=255 (#50)
>
>... and so on ...
- Bob Glover
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
