Security Basics mailing list archives

Weird entries in my firewall


From: kronos666 () gmail com
Date: 30 Aug 2005 15:31:01 -0000

Hi list,

I've been getting these weird entries in my firewall (iptables) for a while...

BLOCK 12:29:37.371982 OPT1 192.168.0.50, port 2401 255.255.255.255, port 712 UDP 

Now, the source is the internal IP of my server, which is not connected to the firewall.  It's as if the traffic goes 
through the external interface using the internal ip, and always broadcasts to port 712.  Two of my servers are doing 
that.

Has anyone ever seen something like this?  It has me completely stumped.

Thanks!


Current thread: