On Fri, 26 Apr 2002, Pep Serrano wrote:

> I have the lisa deamon running and get the following logs in my FW:
>
> Apr 26 19:15:40 petit kernel: SuSE-FW-DROP-ANTI-SPOOFINGIN=eth0 OUT= MAC=
> SRC=192.168.0.100 DST=255.255.255.255 LEN=44 TOS=0x00 PREC=0x00 TTL=64 ID=0
> DF PROTO=UDP SPT=1028 DPT=7741 LEN=24
>

These look similar to the logs caused by running nmbd or smbclient
from the samba suite.

The firewall does not seem to break samba as it is dropping an incoming
broadcast from itself (I guess the IP of your fw machine's ethernet is
192.168.0.100, and I guess that lisa is working ok - is it?)

> How can avoid it?
>

I don't see an option for this in version 1.7 of SuSEfirewall2, but I
think that is quite old. I just ignore these (caused by my nmbd) but
I guess you could configre a logsurfer tool to ignore them for you.

dproc

-- 
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]