mail kernel: messages

cahalsall · 03-11-2011, 05:12 PM

My /var/log/messages file is being flooded by messages like these.

Code:

Mar 11 16:38:55 mail kernel: Outbound IN=eth1 OUT=eth0 SRC=192.168.1.68 DST=200.32.248.1 LEN=56 TOS=0x00 PREC=0x00 TTL=127 ID=12577 PROTO=UDP SPT=55374 DPT=53 LEN=36
Mar 11 16:38:55 mail kernel: Inbound IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1e:0b:6f:89:dc:08:00 SRC=192.168.1.11 DST=192.168.1.255 LEN=199 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=631 DPT=631 LEN=179

Any idea what could be causing this? 200.32.248.1 is the address of my primary DNS server.

ComputerErik · 03-11-2011, 08:09 PM

Are you doing any routing/forwarding or the like with iptables? If so it could be considered normal logging of traffic passing through especially if the source and destinations are known and valid.