sure. the 192.168 number is on my internal network behind min internal firewall (which is what the log is from). The 205.174 number is in my DMZ between my internal and external firewall. I get these messages for a variety of things from web boxes to proxy server (boxes in the dmz)... mostly the proxy server. Thanks for enquireing ... I still have been unable to figure it out. Peter ----- Original Message ----- From: "Nick Drage" <nickd@xxxxxxxxxxxxxxxxx> To: <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Friday, October 22, 2004 8:23 AM Subject: Re: RST Packets ? On Thu, Oct 07, 2004 at 02:46:57PM -0300, Peter Marshall wrote: > I keep getting loads of messages like below in my messages file. Does > anyone know why these are occurring ? > > Oct 7 14:44:02 radium kernel: REJECT: int-web3 IN=eth0 OUT=eth1 > SRC=192.168.202.124 DST=205.174.164.21 LEN=40 TOS=0x00 PREC=0x00 TTL=127 > ID=3855 PROTO=TCP SPT=8010 DPT=45832 WINDOW=0 RES=0x00 RST URGP=0 Any chance of more information on where this firewall sits in relation to the relevant networks, and what 192.168.202.124 and 205.174.164.21 are? -- We are the Willing, led by the Unknowing, Are doing the Impossible, for the Ungrateful. We have done so much, for so long, with so little, We are now qualified to do anything with nothing.
