[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] SuSEFirewall doesn't work?



Markus A. Radner wrote:
> 
> SuSE-FW-ACCEPT IN=eth0 OUT= MAC=00:a0:d1:d5:b4:3c:00:09:5b:a8:3e:c0:08:00 
> SRC=213.165.x.x DST=192.168.0.2
> LEN=73 TOS=0x00 PREC=0x00 TTL=57 ID=16216 DF PROTO=TCP SPT=110 DPT=1435 
> WINDOW=5792 RES=0x00 ACK PSH URGP=0 OPT (0101080A0A4992810070F15B)
> 
> My computer is behind a router/firewall. Someone tries to connect at port 1435 
> (and a lot of different other highports as well!).

No. Your POP3-Server is sending you an answer to your client port 1045.

A new connection would read "SYN ACK" in the flags part of the
dumped packet.

Check if the name of the configured POP3-server in your mailclient
resolves to the IP address in your logfile.

-- 
Have fun,
Peter

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here