[pptp-server] Strange Logging

matthew.keay at Phones4u.co.uk matthew.keay at Phones4u.co.uk
Mon Jul 9 09:18:47 CDT 2001


Note the source/destination ports.. and destination address..these are
simply windows machines looking for other windows machines...  Depending on
your firewall ruleset you should be able to drop these crap broadcasts
passing through your firewall.

Matthew.

-----Original Message-----
From: Lech, Dan [mailto:DLech at csicorp-us.com]
Sent: 09 July 2001 15:20
To: 'pptp-server at lists.schulte.org'
Subject: [pptp-server] Strange Logging



> I keep getting a mysterious message logged to the console after I start my
> firewall. I know this is a pptpd list but I didn't start getting this
> until I setup my firewall as per the recommended howto at
> http://home.swbell.net/berzerke.
> 
> PreNat logging.IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:c0:05:04:16:dd:08:00
> SRC=21
> 6.93.46.39 DST=216.93.46.255 LEN=78 TOS=0x00 PREC=0x00 TTL=127 ID=21544
> PROTO=UD
> P SPT=137 DPT=137 LEN=58
> 
> 
> Now, these ip's aren't even close to anything that I have. Also the SRC ip
> changes just a little over time. Is this serious? if not, how do I stop
> logging it?
> 
> Thanks,
> Dan
> 
_______________________________________________
pptp-server maillist  -  pptp-server at lists.schulte.org
http://lists.schulte.org/mailman/listinfo/pptp-server
--- To unsubscribe, go to the url just above this line. --


**********************************************************************
This email, and any attachment, is confidential. If you have received it in error, please 
delete it from your system, do not use or disclose the information in any way, and notify 
me immediately. The contents of this message may contain personal views which are not 
the views of the organisations mentioned in this email, unless specifically stated. You 
may not disclose any information contained herein unless disclosure is specifically 
allowed or the information is publicly available.
**********************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schulte.org/mailman/private/pptp-server/attachments/20010709/578b5e2a/attachment.html>


More information about the pptp-server mailing list