Marko Polo
Senior Member
I have following firewall white-list rule in my table
However, I get following records in my log anyway:
Why?
However, I get following records in my log anyway:
Code:
May 24 10:27:38 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f0:79:59:61:c4:60:08:00 SRC=176.36.209.209 DST=255.255.255.255 LEN=68 TOS=0x00 PREC=0x00 TTL=128 ID=26988 PROTO=UDP SPT=62552 DPT=1947 LEN=48
May 24 10:27:42 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1a:92:91:80:71:08:00 SRC=176.36.209.239 DST=255.255.255.255 LEN=68 TOS=0x00 PREC=0x00 TTL=128 ID=14437 PROTO=UDP SPT=1042 DPT=1947 LEN=48
May 24 10:27:42 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:f0:79:59:61:c4:60:08:00 SRC=176.36.209.209 DST=176.39.255.255 LEN=68 TOS=0x00 PREC=0x00 TTL=128 ID=26995 PROTO=UDP SPT=62552 DPT=1947 LEN=48
May 24 10:27:44 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:ec:43:f6:de:94:1d:08:00 SRC=176.36.209.65 DST=176.39.255.255 LEN=229 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=138 DPT=138 LEN=209
May 24 10:27:46 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1a:92:91:80:71:08:00 SRC=176.36.209.239 DST=176.39.255.255 LEN=68 TOS=0x00 PREC=0x00 TTL=128 ID=14438 PROTO=UDP SPT=1042 DPT=1947 LEN=48
May 24 10:27:49 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:b0:b2:dc:5c:f7:f7:08:00 SRC=176.36.209.164 DST=176.39.255.255 LEN=229 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=138 DPT=138 LEN=209
May 24 10:27:51 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1b:fc:ea:d4:3c:08:00 SRC=176.36.209.98 DST=176.39.255.255 LEN=229 TOS=0x00 PREC=0x00 TTL=128 ID=23740 PROTO=UDP SPT=138 DPT=138 LEN=209
May 24 10:28:14 kernel: DROP IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:ec:43:f6:de:94:1d:08:00 SRC=176.36.209.65 DST=176.39.255.255 LEN=229 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=138 DPT=138 LEN=209
Why?