Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 2 subscribers
  • Views 2885 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Droping pakages

Ola
trying to get my ASL to work (V. 5) 
I have a dsl modem -> ASL -> LAN network but when im trying to access internet from the LAn computers the connection fails. I traced this msg in the loggs and i think this is the problem... 

2004:05:28-23:17:55 (none) kernel: DROP: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:07:e9:c9:be:26:08:00 SRC=192.168.1.5 DST=192.168.1.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=19304 PROTO=UDP SPT=137 DPT=137 LEN=58 
2004:05:28-23:17:56 (none) kernel: DROP: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:07:e9:c9:be:26:08:00 SRC=192.168.1.5 DST=192.168.1.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=19334 PROTO=UDP SPT=137 DPT=137 LEN=58 
2004:05:28-23:18:27 (none) kernel: DROP: IN=eth0 OUT= MAC=00:00:e8:ee:c8:17:00:02:3b:00:a1:3b:08:00 SRC=81.227.18.33 DST=81.227.139.205 LEN=48 TOS=0x00 PREC=0x00 TTL=54 ID=21339 DF PROTO=TCP SPT=1327 DPT=135 WINDOW=65535 RES=0x00 SYN URGP=0 
2004:05:28-23:18:30 (none) kernel: DROP: IN=eth0 OUT= MAC=00:00:e8:ee:c8:17:00:02:3b:00:a1:3b:08:00 SRC=81.227.18.33 DST=81.227.139.205 LEN=48 TOS=0x00 PREC=0x00 TTL=54 ID=21514 DF PROTO=TCP SPT=1327 DPT=135 WINDOW=65535 RES=0x00 SYN URGP=0 
2004:05:28-23:18:39 (none) kernel: DROP: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:07:e9:c9:be:26:08:00 SRC=192.168.1.5 DST=192.168.1.255 LEN=232 TOS=0x00 PREC=0x00 TTL=128 ID=20541 PROTO=UDP SPT=138 DPT=138 LEN=212 
(eth1 is LAN and eth0 is WAN)

and so on... 
I tried to read in the manual about this but haven't found anything useful (on the otherhand its on 


This thread was automatically locked due to age.
  • 0
    ASL is log dropping the netbios beaconing from the Windows machines on your Internal network. Put in a netbios drop rule, and you will eliminate all this junk from the logs.

    You can safely drop the following packet types used by Windows:  135, 137, 138, 139 and 445. You don't want them leaving your LAN, and you don't want them filling up your filter and kernel logs.