[Shorewall-users] Goofy Log Entrys

Francesca C. Smith fsmith at ladylinux.com
Mon Dec 29 21:08:57 PST 2003


Hiya,

I don't usually post here cause well I use Shorewall a lot and well this
log entry has me confused ...

This is a single interface webserver in a datacenter .. Every single web
site can be browsed no issue being hosted on this machine.

But every once in a while I get these .. I do a lookup of the source IP
and get nothing back .. Its strange .. 

Dec 29 20:57:31 cp kernel: Shorewall:logdrop:DROP:IN=eth0 OUT=
MAC=00:c0:9f:21:02:9c:00:e0:52:0a:e7:02:08:00 SRC=83.30.11.216
DST=66.98.212.2 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=23522 DF PROTO=TCP
SPT=18225 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0

Or Am I The Strange One .. ??? Or Most Likely ... Both Of Us ???

1.4.8 With Brown Paper Sack Award Patches Applied .. (Sorry Tom) Cant
Help MySelf .. Since I Know I Will Be Wearing That Sack When Someone
Points Out The Error Of My Ways ...  :-)

Francesca



More information about the Shorewall-users mailing list