> Kevin
>
These are not errors. You are using the -l switch which will log any
traffic on a ipchain rule when a match is meet. This will be logged via
printk (kernel logging)
The tcpwrappers utility may be a better way of disabling access to
services or could be used with ipchains.
Regards Ger
> using ipchains how can i block off listening ports on ppp0? i'm getting
> errors like the following, which is caused by blocking off some ephemeral
> ports on the ppp0 interface. what i really want to do is stop local
> daemons from listening on those ports. i can do that by configuring
> each daemon on that box, but by doing it via ipchains (or something else)
> there's less to check (and less to go wrong).
>> Nov 6 01:00:54 inle kernel: Packet log: input DENY ppp0 PROTO=6 216.239.35.101:80
> 194.125.171.22:2937 L=60 S=0x00 I=5844 F=0x4000 T=49 (#16)
> Nov 6 01:00:56 inle kernel: Packet log: input DENY ppp0 PROTO=6 216.239.35.101:80
> 194.125.171.22:2936 L=60 S=0x00 I=45401 F=0x4000 T=49 (#16)
> Nov 6 01:00:56 inle kernel: Packet log: input DENY ppp0 PROTO=6 216.239.35.101:80
> 194.125.171.22:2934 L=60 S=0x00 I=3135 F=0x4000 T=49 (#16)
>> kevin
>
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
