[ale] Firewalling question

Christopher R. McNabb ilive at mindspring.com
Wed May 5 13:32:26 EDT 1999


I'm using SuSE 5.3 and have setup Firewalling and Masquerading.  All seems
to work fine, but I'm seeing strange entries in my logs.

May  2 09:19:37 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:137
192.168.1.255:137 L=78 S=0x00 I=11008 F=0x0000 T=32
May  2 09:19:37 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
192.168.1.255:138 L=217 S=0x00 I=12032 F=0x0000 T=32
May  2 09:19:38 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
192.168.1.255:138 L=217 S=0x00 I=13056 F=0x0000 T=32
May  2 09:19:39 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
192.168.1.255:138 L=244 S=0x00 I=13312 F=0x0000 T=32
May  2 09:19:39 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
192.168.1.255:138 L=217 S=0x00 I=14080 F=0x0000 T=32
May  2 09:19:40 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
192.168.1.255:138 L=217 S=0x00 I=15104 F=0x0000 T=32


This IP 192.168.1.2 does not exist on my network.  I also see other entries
with other IP addresses.  This has started since I set the machine up, so I
figure it is just a config setting somewhere.  Can anyone help me out here?
port numbers are almost always 137 or 138, and occasionally 513.  Always
UDP.

Thanks
Chris McNabb






More information about the Ale mailing list