[ale] ipchains newbie

[Gene Matthews]

I'm trying to decipher what this is really telling me.  I inherited a 
linux firewall and am starting to poke around.  I THINK it says that a 
packed coming in on eth1 from (source) 192.168.2.13 trying to go to 
(dest) 192.168.1.102 (and .17) was rejected.  I haven't done any 
research yet on the PROTO and other fields yet.  Anyone know where that 
is documented?  In the IPCHAINS-HOWTO maybe; I'll try there.

eth1 is the 192.168.1.x network; eth0 is the 192.168.2.x network.


Dec  7 11:04:40 fly kernel: Packet log: forward REJECT eth1 PROTO=6 
192.168.2.13:2216 192.168.1.102:1214 L=48 S=0x00 I=53693 F=0x4000 T=127 
SYN (#3)
Dec  7 11:04:43 fly kernel: Packet log: forward REJECT eth1 PROTO=6 
192.168.2.13:2216 192.168.1.102:1214 L=48 S=0x00 I=54035 F=0x4000 T=127 
SYN (#3)
Dec  7 11:04:49 fly kernel: Packet log: forward REJECT eth1 PROTO=6 
192.168.2.13:2216 192.168.1.102:1214 L=48 S=0x00 I=54641 F=0x4000 T=127 
SYN (#3)
Dec  7 11:06:06 fly kernel: Packet log: forward REJECT eth1 PROTO=6 
192.168.2.13:2227 192.168.1.17:1214 L=48 S=0x00 I=62972 F=0x4000 T=127 
SYN (#3)
Dec  7 11:06:08 fly kernel: Packet log: forward REJECT eth1 PROTO=6 
192.168.2.13:2227 192.168.1.17:1214 L=48 S=0x00 I=63031 F=0x4000 T=127 
SYN (#3)
Dec  7 11:06:14 fly kernel: Packet log: forward REJECT eth1 PROTO=6 
192.168.2.13:2227 192.168.1.17:1214 L=48 S=0x00 I=63122 F=0x4000 T=127 
SYN (#3)


Thanks for any insights and pointers.

Gene


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.