Ralf G. R. Bergs wrote:
> I frequently see the above error message in syslog. This is on a freshly-
> installed Debian 2.2 system that is running a kernel packet-filter
> ("firewall") for itself.
The above error indicates that recvfrom(6, ...) signalled the error
ECONNREFUSED. AFAIK, this indicates that an earlier packet prompted
the sending of an ICMP port unreachable error.
> Does anyone know what might be causing this? Could the packet filtering rules
> possible be too tight?
You should already know the answer to this. Any REJECT/DENY rules
should use the -l switch to log what is being discarded (apart from
specifics which you expect to get, e.g. NetBIOS-NS, and which would
fill your drive if is was all logged). Then you can see if you're
discarding something that you shouldn't.
--
Glynn Clements <glynn@sensei.co.uk>
-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
