* Mohammad Khan <mkhan@xxxxxxxxxxxxx> 28. Jan 05: > On Fri, 2005-01-28 at 21:43 -0500, Jason Opperisano wrote: > > On Fri, 2005-01-28 at 21:29, Mohammad Khan wrote: > > > two rules in my INPUT chains are: > > > -A INPUT -s 63.110.21.51 -m state --state NEW -j LOG --log-prefix > > > "PLAYNC_NEW " --log-level debug > > > -A INPUT -s 63.110.21.51 -m state --state NEW -j DROP > > > > > > My router is keeping the following logs > > > [snip udp logs] > > > > > > What can I say about these packets? > > judging from the destination UDP ports and the TTL--i would say that > > they are traceroute packets. > my log file is full of this shit. So, why are you logging it? It's just the normal white noise of ordinary Internet traffic. Nothing to care about. > Are they doing traceroute for all the day long?? Maybe you should tell them to go away instead of remain silent. (Replace the -j DROP with a -j REJECT --reject-with icmp-port-unreachable.) HTH, regards, Frank. -- ,------------------------.------------------------.--------------------. | Chemnitzer Linux-Tage | "Linux loves desktops" ' team@xxxxxxxxxxxxx | | March, 5th + 6th, 2005 | http://chemnitzer.linux-tage.de/ | '------------------------'---------------------------------------------'
