Firewall...?

[Alistair]

58 linux kernel: ip_tables: (c)2000 Netfilter core team
Jul 25 04:47:58 linux kernel: ip_conntrack (1024 buckets, 8192 max)
Jul 25 04:47:58 linux kernel: PCI: Enabling device 00:0e.0 (0114 -> 0117)
Jul 25 04:48:02 linux kernel: PCI: Enabling device 00:10.0 (0104 -> 0105)
Jul 25 05:17:33 linux kernel: IN=eth0 OUT= MAC=00:80:c8:fa:11:e9:00:b0:8e:f4:f8:54:08:00 SRC=61.255.38.111 DST=24.247.247.185 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=56115 DF PROTO=TCP SPT=2939 DPT=27374 WINDOW=16384 RES=0x00 SYN URGP=0
Jul 25 05:17:33 linux kernel: IN=eth0 OUT= MAC=00:80:c8:fa:11:e9:00:b0:8e:f4:f8:54:08:00 SRC=61.255.38.111 DST=24.247.247.185 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=56154 DF PROTO=TCP SPT=2939 DPT=27374 WINDOW=16384 RES=0x00 SYN URGP=0
Jul 25 05:17:33 linux kernel: IN=eth0 OUT= MAC=00:80:c8:fa:11:e9:00:b0:8e:f4:f8:54:08:00 SRC=65.35.184.38 DST=24.247.247.185 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=33580 DF PROTO=TCP SPT=64721 DPT=1214 WINDOW=65535 RES=0x00 SYN URGP=0
Jul 25 05:17:34 linux kernel: IN=eth0 OUT= MAC=00:80:c8:fa:11:e9:00:b0:8e:f4:f8:54:08:00 SRC=61.255.38.111 DST=24.247.247.185 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=56191 DF PROTO=TCP SPT=2939 DPT=27374 WINDOW=16384 RES=0x00 SYN URGP=0
Jul 25 05:17:36 linux kernel: IN=eth0 OUT= MAC=00:80:c8:fa:11:e9:00:b0:8e:f4:f8:54:08:00 SRC=65.35.184.38 DST=24.247.247.185 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=42284 DF PROTO=TCP SPT=64721 DPT=1214 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 25 05:17:42 linux kernel: IN=eth0 OUT= MAC=00:80:c8:fa:11:

What the heck does this mean, guys? That it blocked something or what? It's funny for Everybuddy (My chat client) is now acting funky, but now it's not.


Any help would be appericated again.


Thanks,
Ali

[ntt.]

I assume this is from /var/log/messages or some such log file. It probably does mean it's blocking something - take a look through the firewall startup script to see where it mentions logging.

As for the messages:

IN / OUT: Network device that recieved / sent the packet
SRC / DST: Source / destination IP address of packet
PROTO: Protocol (TCP or UDP)
SPT / DPT: Source / destination port (i.e 80 for HTTP, e.t.c)

The rest aren't as important or meaningful, or I don't know what they mean. ;)