LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-14-2004, 11:45 AM   #1
ithawtewrong
Member
 
Registered: Jul 2004
Location: Mile High
Posts: 161

Rep: Reputation: 30
SuSE Firewall - unknown log message


I was hoping someone could help me out here. I have done a couple of google seaches and have come up with no real answer. I have the following in my log file:

Code:
SFW2-INext-DROP-DEFLT IN=ppp0 OUT= MAC= SRC=61.48.xxx.xx DST=67.107.xxx.xx LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=61556 DF PROTO=TCP SPT=3199 DPT=135 WINDOW=58944 RES=0x00 SYN URGP=0 OPT (020405A00103030201010402)
SFW2-INext-DROP-DEFLT IN=ppp0 OUT= MAC= SRC=61.48.xxx.xx DST=67.107.xxx.xx LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=61696 DF PROTO=TCP SPT=3199 DPT=135 WINDOW=58944 RES=0x00 SYN URGP=0 OPT (020405A00103030201010402)
SFW2-IN-ILL-TARGET IN=ppp0 OUT= MAC= SRC=218.xx.xxx.xx DST=67.107.xxx.xx LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=7709 DF PROTO=TCP SPT=32778 DPT=445 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405AC01010402)
)
The one I have a question on is the SFW2-IN-ILL-TARGET. What does this mean?
I am accustomed to seeing the DROP, but have never seen an ILL before. I'm assuming it was blocked by the firewall but I don't know for sure.

Thanks
 
Old 10-14-2004, 04:47 PM   #2
m_shroom
Member
 
Registered: Oct 2004
Location: Queen Charlotte B. C. Canada
Distribution: openSUSE 11.1
Posts: 42

Rep: Reputation: 15
I get ".......kernel: SuSE-FW-ILLEGAL-TARGET IN=* ....... DST=xxx.xxx.xxx.0 LEN=48......" quite often and have been told it is a miss configured machine (probably windows) broadcasting for shares or other sevices.
Note the zero "DST=xxx.xxx.xxx.0".
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Unknown error message!!!! GCONF or something? alirezan1 Linux - Newbie 3 08-08-2010 09:45 PM
message, message.1 in /var/log/ can be deleted for space? phpsharma Linux - Newbie 4 11-17-2004 01:23 PM
Xchat unknown error message. LiD Linux - Software 2 08-07-2004 12:01 AM
/var/log/kern.log message dimkal Linux - Hardware 1 05-08-2004 07:57 AM
SuSE 9.0 firewall log file? johnny1959 Linux - Newbie 2 03-09-2004 02:56 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:08 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration