Mailing List
Home
Forum Home
Linux - General Red Hat Linux discussion list
Enterprise Linux 3 - Discussion of Red Hat Enterprise Linux 3 (Taroon)
Installation - Getting started with Red Hat Linux
Red Hat Linux 9 - Discussion of Red Hat Linux 9 (Shrike)
Red Hat Linux 7.3 - Discussion of Red Hat Linux 7.3 (Valhalla)
Red Hat Linux 7.2 - Discussion of Red Hat Linux 7.2 (Enigma)
Apache Web Server
Oracle database, Microsoft SQL server ...
Subjects
application/x mplayer2 plugin
RPM error: db4 error(16) from dbenv >remove: Device or resource
   busy
Command stream end of file while reading
X Windows problem (xauth)
Upgrading openoffice 1 1 rpm
FTP: connection refused
FTP: connection refused
mount: /dev/cdrom: is not a valid block device
Dell Precision 650, RedHat 9, no sound
how to trace the cause resulting in the crash of bind server
Virus on the list
UNINSTALL RPM MYSQL
usb pen drives: mounting as a user
broadcom network interface
make mrproper
sendmail configuration on redhat
Couldn 't open PID file /var/run/named/named pid Permission denied
Promise 378 controller
kernel 2 6 and /dev/sound/mixer not found
Problem using up2date
mrtg step by step howto/configuration for a newbie?
Compiling and Installing Kernel 2 6
Can 't locate module ppp0, can 't locate module ppp compress 21
HOW I CAN MAKE BOOTABLE FLOPPY DISKET
Lotus Notes under Wine
/etc/security/limits conf question
Intel E/1000 driver
Command stream end of file while reading
rpm database corrupt
qla2300 modules
 
Search:  
Power your search with and, or, +, -, or "some phrase" operators.
iptables and/or CUPS question

iptables and/or CUPS question

2005-08-11       - By Bill Tangren

 Back
Reply:     1     2     3  

Burke, Thomas G. wrote:
> I cannot answer you question, as I am still using ipchains.  However,
> 10.255.255.255 is the broadcast address for the 10.x.x.x series of
> networks.   IIUC, 10.1.5.8 is broadcasting to the 10.x.x.x network that
> the service on port 631 is available.  It appears to be receiving
> something from 10.1.4.238 (a different network) that is an invalid
> packet.  Of course, it's been a long while since I've looked at this
> sort of thing, so I may be full of horse hockey.
>
>   -Tom
>  
>
> -- --Original Message-- --
>
> My RHEL ES4 box is behind a firewall. I have it set up as a CUPS print
> server. I noticed that I was getting this in my logwatch output (when
> Detail is set to Low):
>
>   -- ---- ---- ---- --- Kernel Begin -- ---- ---- ---- ------
>    From 10.1.5.58 - 2764 packets to udp(631)
>   -- ---- ---- ---- ---- Kernel End -- ---- ---- ---- ---- --
>
> My box IS 10.1.5.58. It looked like iptables on my box was stopping
> packets from itself, so I bumped up the detail to Med, and got this:
>
>   -- ---- ---- ---- --- Kernel Begin -- ---- ---- ---- ------
>     From 10.1.5.58 - 2777 packets
>        To 10.255.255.255 - 2777 packets
>           Service: ipp (udp/631) (INPUT packet died:,eth0,none) - 2777
> packets
>   -- ---- ---- ---- ---- Kernel End -- ---- ---- ---- ---- --
>
> This is a typical /var/log/message entry:
>
>
> Could anyone tell me (or point me to a link that explains) why iptables
> is doing this. It occurred to me that the print server might be badly
> configured, but I am able to use it to print from other computers on our
> network. And, there is no 10.255.255.255 box on the network.
>
>

Sorry. I cut and pasted the wrong packet. This is a better example:

Aug 11 03:07:14 mach2 kernel: INPUT packet died: IN=eth0 OUT= MAC=
SRC=10.1.5.58 DST=10.255.255.255 LEN=175 TOS=0x00 PREC=0x00 TTL=64
ID=1832 DF PROTO=UDP SPT=631 DPT=631 LEN=155


--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@(protected)?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Earn $52 per hosting referral at Lunarpages.