On 04.04.2015 02:32, James B. Byrne wrote:
> I am seeing log file entries like this:
>
> IN=eth0 OUT=eth1 SRC=109.74.193.253 DST=x.y.z.34 LEN=122 TOS=0x00
> PREC=0x00 TTL=48 ID=49692 PROTO=ICMP TYPE=3 CODE=3 [SRC=x.y.z.34
> DST=109.74.193.253 LEN=94 TOS=0x00 PREC=0x00 TTL=53 ID=41330 PROTO=UDP
> SPT=34679 DPT=53 LEN=74 ]
>
> This is found on our gateway host. eth0 is the WAN i/f, eth1 is the
> LAN i/f. Our netblock is x.y.z.0/24. Can somebody tell me what this
> record is?
>
>
IN=eth0 OUT=eth1 SRC=109.74.193.253 DST=x.y.z.34 LEN=122 TOS=0x00
PREC=0x00 TTL=48 ID=49692 PROTO=ICMP TYPE=3 CODE=3
This is a "Port unreachable" message from host 109.74.193.253.
[SRC=x.y.z.34 DST=109.74.193.253 LEN=94 TOS=0x00 PREC=0x00 TTL=53
ID=41330 PROTO=UDP SPT=34679 DPT=53 LEN=74 ]
This is probably the cause of the above error: SRC=x.y.z.34 tried to do
a DNS lookup on DST=109.74.193.253 which failed (hence the icmp response).
Regards,
Dennis
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
