From owner-freebsd-questions Thu Jan 31 21:50:17 2002 Delivered-To: freebsd-questions@freebsd.org Received: from smtp.tninet.se (sheridan.tninet.se [195.100.94.102]) by hub.freebsd.org (Postfix) with ESMTP id D527A37B41D for ; Thu, 31 Jan 2002 21:49:45 -0800 (PST) Received: from there (bb-62-5-36-29.bb.tninet.se [62.5.36.29]) by sheridan.tninet.se (BMR ErlangTM/OTP 3.0) with ESMTP id 55896.542582.1012.1s5713573sheridan ; Fri, 01 Feb 2002 06:49:42 +0100 Content-Type: text/plain; charset="iso-8859-1" From: Mark Rowlands To: , Subject: Re: Firewall log question Date: Fri, 1 Feb 2002 06:49:57 +0100 X-Mailer: KMail [version 1.3.2] References: <002801c1aaa8$9018da20$0701a8c0@darryl> In-Reply-To: <002801c1aaa8$9018da20$0701a8c0@darryl> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <20020201054945.D527A37B41D@hub.freebsd.org> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thursday 31 January 2002 11:42 pm, Darryl Hoar wrote: > Greetings, > I have 4.4-Stable running as a firewall with IPFILTER. > > We recently had to replace our aDSL router/modem with a > different make/model. > > I have started seeing a ton of the following in the firewall_log > file. > > ipmon[104]: 15:36:52.779531 xl0 @0:3 b 10.0.0.1, router -> 10.0.0.255, > router PR udp len 20 72 IN > Can someone help me decipher this, so I can figure out the cause and > fix it? at 15:36:52.779531 rule 3 blocked an inbound broadcast packet (udp protocol 520 (routed possibly?) ) from 10.0.0.1 and kindly logged it for you ipfstat -in will tell exactly what rule 3 (the offending rule in this case) looks like perhaps it is @3 block in log quick on xl0 from 10.0.0.0/8 to any > Can someone help me decipher this, so I can figure out the cause and > fix it? > > thanks, > Darryl > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- Sign seen on door: C I T Y P L A N N ING To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message