On Saturday 2011-03-05 16:12, Alex wrote: > >Yes, thanks for that. It is matching some packets. >[...] >Mar 5 10:08:11 fc14 kernel: [2726633.762301] dnat invalid IN=eth1 >OUT=eth0 SRC=192.168.1.151 DST=69.171.224.11 LEN=52 TOS=0x00 PREC=0x00 >TTL=63 ID=19662 DF PROTO=TCP SPT=48270 DPT=80 WINDOW=54 RES=0x00 ACK >FIN URGP=0 > >Mar 5 10:08:45 fc14 kernel: [2726667.362163] dnat invalid IN=eth1 >OUT=eth0 SRC=192.168.1.151 DST=69.63.181.56 LEN=52 TOS=0x00 PREC=0x00 >TTL=63 ID=19949 DF PROTO=TCP SPT=44230 DPT=80 WINDOW=98 RES=0x00 ACK >FIN URGP=0 > >The last two are just regular requests for access to facebook from >another PC on the internal network. nfct discovered that visiting facebook is an invalid waste of timeÂâ a conclusion I consent toÂâ and possibly implies to play a game instead, say, Minecraft. :-) -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html