View previous topic :: View next topic |
Author |
Message |
Cagnulein l33t


Joined: 18 Sep 2003 Posts: 861 Location: Modena, Italy
|
Posted: Sat Apr 17, 2004 9:47 am Post subject: Attacco? [Auto-Risolto] |
|
|
Oggi mentre stavo usando il pc, in tutte le mie shell è comparso questo messaggio:
martian source [mioip] from 127.0.0.1, on dev ppp0 ll header: 45:00:00:28
che può essere?
il pc si è messo andare a rallentatore e l'adsl scaricava al massimo (io avevo aperto solo xchat connesso a internet)
appena ho chiuso la porta ssh (che cmq è aperta solo nella lan locale) il pc è tornato ad andare bene...
qualcuno mi stava entrando?
Argh argh argh...
Last edited by Cagnulein on Sat Apr 17, 2004 9:59 am; edited 1 time in total |
|
Back to top |
|
 |
Cagnulein l33t


Joined: 18 Sep 2003 Posts: 861 Location: Modena, Italy
|
Posted: Sat Apr 17, 2004 9:59 am Post subject: |
|
|
Quote: | From a FAQ:
What does "kernel: martian source aabbccdd for 11223344, dev eth0" mean?
--
These are packets that Linux does not expect from the direction they came
from (i.e. packets from internal hosts coming in on the external interface).
The cause is probably a misconfigured machine on your LAN.
You can turn off logging those packets via
/proc/sys/net/ipv4/conf/*interface*/log_martians
which is documented in /usr/src/linux/Documentation/proc.txt |
|
|
Back to top |
|
 |
|