On Sunday 18 July 2004 9:50 pm, Mail Lists wrote:
> I disallow iana reserved and some rfc 1918 from my firewall.
>
> cRES_LDROP all -- 172.16.0.0/12 0.0.0.0/0
>
> which I would expect to block 172.16 to 172.31.
>
> However I get these in my log files:
>
> Jul 18 16:21:47 fw kernel: [FW Drop-Res] IN=eth1 OUT= MAC=<xx>
> SRC=172.139.140.122 DST=<myip> LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=30189
> DF PROTO=TCP SPT=3477 DPT=1025 WINDOW=16384 RES=0x00 SYN URGP=0
>
> I'm stumped - why did 172.139 get dropped here? Not that the packet
> wouldn't have gotten dropped later anyway but this rule should not
> have matched?
>
> Suggestions?
Please post your ruleset so we can see everything relating to cRES_LDROP.
Regards,
Antony.
--
If you can't find an Open Source solution for it, then it isn't a real
problem.
Please reply to the list;
please don't CC me.
