LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 03-21-2005, 09:13 AM   #1
Dummy-in-Linux
Member
 
Registered: Jun 2004
Location: Bangkok, Thailand
Distribution: Fedora 25 86_64
Posts: 357

Rep: Reputation: 32
I have a really weird Internet problem,


The problem is that if I try to open a website hosted on an IP address
of dimenoc.com (example http://thai-cuisine.pai-nai.com) I get
something what looks like a port scan from 32930 and up. And as result
the website doesn't open, I belief that the problem is not only with
my Linux box, all I'm also sure that some other Linux computers can
visit my website…as I can see in my stats.

I use Fedora Core 3, Kernel 2.6.10.770, Firestarter 1.0.1 (as Firewall)

It gets really weird if I say that I have no problems with my Windows
computer which uses the same network to get to the internet, it not
helps if I swap network IP address from Windows comp to Linux comp and
visa versa. And I can say on the Windows computer the ports higher
then 32930 are closed (I have it closed with software and even if I
close it with my hardware Firewall)

Here some lines from my Firewall log….

Time:Mar 19 12:33:25 Direction: Inbound In:eth0 Out: Port:32944 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:33:40 Direction: Inbound In:eth0 Out: Port:32945 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:33:42 Direction: Inbound In:eth0 Out: Port:32945 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:33:42 Direction: Inbound In:eth0 Out: Port:32944 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:33:50 Direction: Inbound In:eth0 Out: Port:32944 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:33:57 Direction: Inbound In:eth0 Out: Port:32945 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:34:02 Direction: Inbound In:eth0 Out: Port:32944 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:34:17 Direction: Inbound In:eth0 Out: Port:32945 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:34:18 Direction: Inbound In:eth0 Out: Port:32944 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:34:25 Direction: Inbound In:eth0 Out: Port:32945 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:34:42 Direction: Inbound In:eth0 Out: Port:32944 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown
Time:Mar 19 12:34:57 Direction: Inbound In:eth0 Out: Port:32945 Source:72.29.66.135 Destination:192.168.0.8 Length:44 TOS:0x00 Protocol:TCP Service:Unknown................---/ /------------

Sorry I not post all lines because it is just going up 1 port for
hours if I let it go…..
 
Old 03-22-2005, 01:29 AM   #2
JohnBoy
Member
 
Registered: Oct 2003
Distribution: Debian, RH, Knoppix, Ubuntu, CentOS
Posts: 62

Rep: Reputation: 15
Since these two ports (32944 and 32945) are common to RPC based services and to Windows Messaging Service, our trouble may be due to a firewall setting that is trying to prevent exploitation. Please view the following URL:

http://www.securityreference.com/com...000/32945.html
 
Old 03-23-2005, 09:55 AM   #3
Dummy-in-Linux
Member
 
Registered: Jun 2004
Location: Bangkok, Thailand
Distribution: Fedora 25 86_64
Posts: 357

Original Poster
Rep: Reputation: 32
The problem is fixed....

All the glory go's to Firestarter (http://www.fs-security.com) version 1.0.3. fixed, as expected, all the problems.

So I can stay with probably the easiest to use Firewall manager for Linux....
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SUSE weird internet problem yoshioboebirdo Linux - Networking 3 06-20-2005 02:48 PM
Weird Internet Connection Problem! matrim Linux - Networking 3 01-28-2005 04:30 PM
Weird, weird apache2 problem atheist Debian 1 09-17-2004 08:26 PM
debian sarge & new kernel => weird internet problem mikey79 Linux - Networking 2 08-31-2004 08:00 AM
Weird Mandrake Internet problem Szabo Linux - Networking 3 03-19-2004 07:55 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 04:07 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration