[Shorewall-users] Error Log

Tom Eastep teastep at shorewall.net
Mon Dec 1 15:55:45 PST 2003

On Mon, 2003-12-01 at 15:39, Reginald Richardson wrote:
> Good day,
> Can someone please be so kind, as to explain me what this means:
> Dec 1 06:44:06 GWY-01 Shorewall:logdrop:DROP: IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:00:ca:26:cb:b2:08:00 SRC= DST= LEN=28 TOS=00 PREC=0x00 TTL=1 ID=56528 PROTO=2
> i'm behind a motorola surfboard cable modem 5100e
> the modem, issues a dhcp ip to my firewall, the modem has an ip addr. of, just for http information on the modem.
> my firewall uses pump to get the dhcp address, and i'm in the 192.168.10.x subnet on my lan..
> so, i'm kinda lost receiving this messages, cause i don't know where the src address of is originating, and the dst address of, don't have a clue what that mean.
> and i'm seeing something like 1000+ hits per day, of this message in the log

It's probably some device owned by one of your neighbors. If the
messages annoy you, simply modify your rfc1918 file to drop packets from
that address.

Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep at shorewall.net

More information about the Shorewall-users mailing list