privet
Well-Known Member
Hi All,
I have noticed a couple of times when I see *allot* DENY entries on my firewall. That in itself is not the problem. The thing is that these DENY entries are for IP's that are not currently assigned to me.
Right now my IP is 66.18.80.82. On my firewall I see the many of the following entries. Note that the destination IP is not mine.
Has anyone else seen something like this?
====================
Feb 27 17:24:15 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.14.197.134:3766 66.18.80.228:4662 L=48 S=0x28 I=16979 F=0x4000 T=110 SYN (#27)
Feb 27 17:24:17 boson kernel: Packet log: input DENY ppp0 PROTO=6 192.251.46.22:37561 66.18.80.191:2097 L=48 S=0x28 I=9868 F=0x4000 T=106 SYN (#27)
Feb 27 17:24:19 boson kernel: Packet log: input DENY ppp0 PROTO=6 200.106.34.16:19521 66.18.80.191:2097 L=48 S=0x28 I=1550 F=0x4000 T=114 SYN (#27)
Feb 27 17:24:20 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.3.15.16:4184 66.18.80.9:2254 L=64 S=0x28 I=8261 F=0x4000 T=111 SYN (#27)
Feb 27 17:24:20 boson kernel: Packet log: input DENY ppp0 PROTO=6 66.189.69.78:3919 66.18.80.71:50051 L=48 S=0x28 I=42630 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:23 boson kernel: Packet log: input DENY ppp0 PROTO=6 66.18.80.2:3837 66.18.80.24:1795 L=48 S=0x28 I=36607 F=0x4000 T=108 SYN (#27)
Feb 27 17:24:23 boson kernel: Packet log: input DENY ppp0 PROTO=6 192.251.46.22:37561 66.18.80.191:2097 L=48 S=0x28 I=9880 F=0x4000 T=106 SYN (#27)
Feb 27 17:24:23 boson kernel: Packet log: input DENY ppp0 PROTO=6 66.189.69.78:3919 66.18.80.71:50051 L=48 S=0x28 I=42872 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:30 boson kernel: Packet log: input DENY ppp0 PROTO=6 66.189.69.78:3919 66.18.80.71:50051 L=48 S=0x28 I=43255 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:35 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.8.56.233:4810 66.18.80.243:2699 L=48 S=0x28 I=22891 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:38 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.8.56.233:4810 66.18.80.243:2699 L=48 S=0x28 I=22992 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:39 boson kernel: Packet log: input DENY ppp0 PROTO=6 82.49.14.66:4961 66.18.80.228:4662 L=48 S=0x28 I=31872 F=0x4000 T=108 SYN (#27)
Feb 27 17:24:43 boson kernel: Packet log: input DENY ppp0 PROTO=6 82.49.14.66:4961 66.18.80.228:4662 L=48 S=0x28 I=32162 F=0x4000 T=108 SYN (#27)
Feb 27 17:24:44 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.8.56.233:4810 66.18.80.243:2699 L=48 S=0x28 I=23152 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:46 boson kernel: Packet log: input DENY ppp0 PROTO=6 217.80.255.112:43967 66.18.80.228:4662 L=60 S=0x28 I=49019 F=0x4000 T=47 SYN (#27)
Feb 27 17:24:46 boson kernel: Packet log: input DENY ppp0 PROTO=6 81.103.14.104:1139 66.18.80.191:2097 L=64 S=0x28 I=2463 F=0x4000 T=110 SYN (#27)
Feb 27 17:24:48 boson kernel: Packet log: input DENY ppp0 PROTO=6 82.49.14.66:4961 66.18.80.228:4662 L=48 S=0x28 I=32760 F=0x4000 T=108 SYN (#27)
Feb 27 17:24:49 boson kernel: Packet log: input DENY ppp0 PROTO=6 81.103.14.104:1139 66.18.80.191:2097 L=64 S=0x28 I=2528 F=0x4000 T=110 SYN (#27)
I have noticed a couple of times when I see *allot* DENY entries on my firewall. That in itself is not the problem. The thing is that these DENY entries are for IP's that are not currently assigned to me.
Right now my IP is 66.18.80.82. On my firewall I see the many of the following entries. Note that the destination IP is not mine.
Has anyone else seen something like this?
====================
Feb 27 17:24:15 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.14.197.134:3766 66.18.80.228:4662 L=48 S=0x28 I=16979 F=0x4000 T=110 SYN (#27)
Feb 27 17:24:17 boson kernel: Packet log: input DENY ppp0 PROTO=6 192.251.46.22:37561 66.18.80.191:2097 L=48 S=0x28 I=9868 F=0x4000 T=106 SYN (#27)
Feb 27 17:24:19 boson kernel: Packet log: input DENY ppp0 PROTO=6 200.106.34.16:19521 66.18.80.191:2097 L=48 S=0x28 I=1550 F=0x4000 T=114 SYN (#27)
Feb 27 17:24:20 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.3.15.16:4184 66.18.80.9:2254 L=64 S=0x28 I=8261 F=0x4000 T=111 SYN (#27)
Feb 27 17:24:20 boson kernel: Packet log: input DENY ppp0 PROTO=6 66.189.69.78:3919 66.18.80.71:50051 L=48 S=0x28 I=42630 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:23 boson kernel: Packet log: input DENY ppp0 PROTO=6 66.18.80.2:3837 66.18.80.24:1795 L=48 S=0x28 I=36607 F=0x4000 T=108 SYN (#27)
Feb 27 17:24:23 boson kernel: Packet log: input DENY ppp0 PROTO=6 192.251.46.22:37561 66.18.80.191:2097 L=48 S=0x28 I=9880 F=0x4000 T=106 SYN (#27)
Feb 27 17:24:23 boson kernel: Packet log: input DENY ppp0 PROTO=6 66.189.69.78:3919 66.18.80.71:50051 L=48 S=0x28 I=42872 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:30 boson kernel: Packet log: input DENY ppp0 PROTO=6 66.189.69.78:3919 66.18.80.71:50051 L=48 S=0x28 I=43255 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:35 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.8.56.233:4810 66.18.80.243:2699 L=48 S=0x28 I=22891 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:38 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.8.56.233:4810 66.18.80.243:2699 L=48 S=0x28 I=22992 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:39 boson kernel: Packet log: input DENY ppp0 PROTO=6 82.49.14.66:4961 66.18.80.228:4662 L=48 S=0x28 I=31872 F=0x4000 T=108 SYN (#27)
Feb 27 17:24:43 boson kernel: Packet log: input DENY ppp0 PROTO=6 82.49.14.66:4961 66.18.80.228:4662 L=48 S=0x28 I=32162 F=0x4000 T=108 SYN (#27)
Feb 27 17:24:44 boson kernel: Packet log: input DENY ppp0 PROTO=6 80.8.56.233:4810 66.18.80.243:2699 L=48 S=0x28 I=23152 F=0x4000 T=109 SYN (#27)
Feb 27 17:24:46 boson kernel: Packet log: input DENY ppp0 PROTO=6 217.80.255.112:43967 66.18.80.228:4662 L=60 S=0x28 I=49019 F=0x4000 T=47 SYN (#27)
Feb 27 17:24:46 boson kernel: Packet log: input DENY ppp0 PROTO=6 81.103.14.104:1139 66.18.80.191:2097 L=64 S=0x28 I=2463 F=0x4000 T=110 SYN (#27)
Feb 27 17:24:48 boson kernel: Packet log: input DENY ppp0 PROTO=6 82.49.14.66:4961 66.18.80.228:4662 L=48 S=0x28 I=32760 F=0x4000 T=108 SYN (#27)
Feb 27 17:24:49 boson kernel: Packet log: input DENY ppp0 PROTO=6 81.103.14.104:1139 66.18.80.191:2097 L=64 S=0x28 I=2528 F=0x4000 T=110 SYN (#27)