[gentoo-user] Help, iptables logging to current console

[gentoo-user] Help, iptables logging to current console

[Walter Dnes]

  I'm temporarily on dialup after my ADSL router/modem died.  The ADSL
router/modem used to drop all the garbage aimed my ports 135, 445, 1434,
etc.  Iptables never saw it.  Now that I'm on dialup, iptables does see
the garbage, and so do I, on my current console...

IN=ppp0 OUT= MAC= SRC=208.65.244.98 DST=208.65.247.240 LEN=48 TOS=0x00 PREC=0x00 TTL=125 ID=33631 DF PROTO=TCP SPT=3961 DPT=445 WINDOW=8760 RES=0x00 SYN URGP=0
IN=ppp0 OUT= MAC= SRC=208.65.244.98 DST=208.65.247.240 LEN=48 TOS=0x00 PREC=0x00 TTL=125 ID=35461 DF PROTO=TCP SPT=1042 DPT=135 WINDOW=8760 RES=0x00 SYN URGP=0
IN=ppp0 OUT= MAC= SRC=208.65.244.98 DST=208.65.247.240 LEN=48 TOS=0x00 PREC=0x00 TTL=125 ID=35677 DF PROTO=TCP SPT=1042 DPT=135 WINDOW=8760 RES=0x00 SYN URGP=0

  The line in /var/lib/iptables/rules-save that triggers this is...

-A TCP_IN -p tcp -m tcp --dport 0:1023 -j DROP_LOG

  And the DROP_LOG rules are...

-A DROP_LOG -j LOG --log-level 6
-A DROP_LOG -j DROP

  In the past, I did not have this problem when on dialup.  I expect to
be back up on ADSL tomorrow evening, but I do want this solved.  The
most recent change on my system was the upgrade to gcc 4.1.1, and the
accompanying rebuild of system and world, a few days ago.

-- 
Walter Dnes <waltdnes@waltdnes.org> In linux /sbin/init is Job #1
My musings on technology and security at http://tech_sec.blog.ca
-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: Help, iptables logging to current console

[Remy Blank]

Walter Dnes wrote:
> The
> most recent change on my system was the upgrade to gcc 4.1.1, and the
> accompanying rebuild of system and world, a few days ago.

It's due to the baselayout update. There's a typo in /etc/conf.d/rc that
was fixed a few days ago. Change the following line:

  RC_DMESG_LOGLEVEL="1"

to

  RC_DMESG_LEVEL="1"

-- Remy


Remove underscore and suffix in reply address for a timely response.

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: Help, iptables logging to current console

[Walter Dnes]

On Tue, Sep 19, 2006 at 09:28:39AM +0200, Remy Blank wrote

> It's due to the baselayout update. There's a typo in /etc/conf.d/rc
> that was fixed a few days ago. Change the following line:
> 
>   RC_DMESG_LOGLEVEL="1"
> 
> to
> 
>   RC_DMESG_LEVEL="1"

  Thanks.  I got a brand new ADSL modem/router yesterday, so I'm no
longer on dialup, but I do need it occasionally.  After a couple of days
on dialup, I know why people complain so bitterly about fat web pages
that take forever to load.

-- 
Walter Dnes <waltdnes@waltdnes.org> In linux /sbin/init is Job #1
My musings on technology and security at http://tech_sec.blog.ca
-- 
gentoo-user@gentoo.org mailing list