drop v logu neviem co to znamena

black_angel1

Jan/08/2013 07 firewall,info firewall: DROP input: in out:(none), src-mac 00, proto TCP (SYN), 59.1.13.253->xxx.xxx.xxx.xxx, len 48

Jan/08/2013 07 firewall,info firewall: DROP input: in out:(none), src-mac 00, proto TCP (SYN), 211.204.115.18->xxx.xxx.xxx.xxx, len 52

Jan/08/2013 07 firewall,info firewall: DROP input: in out:(none), src-mac 00, proto TCP (SYN), 211.204.115.18->xxx.xxx.xxx.xxx, len 48

Jan/08/2013 07 firewall,info firewall: DROP input: in out:(none), src-mac 00, proto TCP (SYN), 112.170.247.213->xxx.xxx.xxx.xxx, len 48

Jan/08/2013 07 firewall,info firewall: DROP input: in out:(none), src-mac 00, proto TCP (SYN), 1.212.233.234->xxx.xxx.xxx.xxx, len 52

Jan/08/2013 07 firewall,info firewall: DROP input: in out:(none), src-mac 00, proto TCP (SYN), 112.170.247.213->xxx.xxx.xxx.xxx, len 48

Jan/08/2013 07 firewall,info firewall: DROP input: in out:(none), src-mac 00, proto TCP (SYN), 1.212.233.234->xxx.xxx.xxx.xxx, len 52

Jan/08/2013 07 firewall,info firewall: DROP input: in out:(none), src-mac 00, proto TCP (SYN), 1.212.233.234->xxx.xxx.xxx.xxx, len 48

neviem co to znamena co je to za mac adresu ale asi nieje z mojej siete

moze mi to niekto objasnit ?

losos

mas zapnute v IP-Firewall nejake pravidlo, s action LOG ktore ti zapisuje do logu co urobilo nejake DROP pravidlo hned pod nim.

podla logu to je drop asi bruteforce utoku na tvoj wan

black_angel1

no to ze to zapisuje pravidlo v firewalle tak to je jasne len som nechapal ze co to je a teraz som sa pozel ze ssh_blacklist mam tiez pekny zoznam ip adries

vo firewalle mam este lgo na invalid connection co s invalid connection ?

losos

dat zlavu na pripojenie do internetu

black_angel1

ja niesom ISP

black_angel1

a co napr toto

Jan/08/2013 09 firewall,info firewall: INVALID forward: in out, src-mac 2c, proto TCP (ACK,FIN), 10.10.11.161->98.139.225.42, len 40

Jan/08/2013 09 firewall,info firewall: INVALID forward: in out, src-mac 64, proto TCP (ACK,RST), 10.10.11.103->23.14.92.184, len 40

Jan/08/2013 09 firewall,info firewall: INVALID forward: in out, src-mac 64, proto TCP (ACK,RST), 10.10.11.103->69.171.246.17, len 40

Jan/08/2013 09 firewall,info firewall: INVALID input: in out:(none), src-mac 00, proto TCP (ACK,RST), 31.13.64.7->213.81.132.154, len 40

Jan/08/2013 09 firewall,info firewall: INVALID forward: in out, src-mac 2c, proto TCP (ACK,FIN), 10.10.11.161->98.139.225.42, len 40

Jan/08/2013 09 firewall,info firewall: INVALID input: in out:(none), src-mac 00, proto TCP (ACK,RST), 31.13.64.7->213.81.132.154, len 40

Jan/08/2013 09 firewall,info firewall: INVALID forward: in out, src-mac 2c, proto TCP (ACK,FIN), 10.10.11.161->62.168.93.50, len 40

Jan/08/2013 09 firewall,info firewall: INVALID forward: in out, src-mac 00, proto TCP (ACK,FIN), 10.10.11.43->213.81.185.34, len 40

Jan/08/2013 09 firewall,info firewall: INVALID forward: in out, src-mac 2c, proto TCP (ACK,FIN), 10.10.11.161->62.168.93.50, len 40

Jan/08/2013 09 firewall,info firewall: INVALID forward: in out, src-mac 2c, proto TCP (ACK,RST), 10.10.11.161->98.139.225.42, len 40