summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-discuss/20120508
diff options
context:
space:
mode:
Diffstat (limited to 'zarb-ml/mageia-discuss/20120508')
-rw-r--r--zarb-ml/mageia-discuss/20120508/007250.html67
-rw-r--r--zarb-ml/mageia-discuss/20120508/007251.html94
-rw-r--r--zarb-ml/mageia-discuss/20120508/007252.html125
-rw-r--r--zarb-ml/mageia-discuss/20120508/007253.html125
-rw-r--r--zarb-ml/mageia-discuss/20120508/007254.html77
-rw-r--r--zarb-ml/mageia-discuss/20120508/007255.html84
-rw-r--r--zarb-ml/mageia-discuss/20120508/007256.html75
-rw-r--r--zarb-ml/mageia-discuss/20120508/007257.html79
-rw-r--r--zarb-ml/mageia-discuss/20120508/007258.html76
-rw-r--r--zarb-ml/mageia-discuss/20120508/007259.html86
-rw-r--r--zarb-ml/mageia-discuss/20120508/author.html97
-rw-r--r--zarb-ml/mageia-discuss/20120508/date.html97
l---------zarb-ml/mageia-discuss/20120508/index.html1
-rw-r--r--zarb-ml/mageia-discuss/20120508/subject.html97
-rw-r--r--zarb-ml/mageia-discuss/20120508/thread.html117
15 files changed, 1297 insertions, 0 deletions
diff --git a/zarb-ml/mageia-discuss/20120508/007250.html b/zarb-ml/mageia-discuss/20120508/007250.html
new file mode 100644
index 000000000..7be0d2946
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007250.html
@@ -0,0 +1,67 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA8597C.300%40roadrunner.com%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+
+ <LINK REL="Next" HREF="007251.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>Frank Griffin</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA8597C.300%40roadrunner.com%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">ftg at roadrunner.com
+ </A><BR>
+ <I>Tue May 8 01:23:40 CEST 2012</I>
+ <P><UL>
+
+ <LI>Next message: <A HREF="007251.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7250">[ date ]</a>
+ <a href="thread.html#7250">[ thread ]</a>
+ <a href="subject.html#7250">[ subject ]</a>
+ <a href="author.html#7250">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 05/07/2012 05:27 PM, Maarten Vanraes wrote:
+&gt;<i> promiscuous mode means you're passing through from layer 2 to layer 3
+</I>&gt;<i> irrespective of mac address (ie: even if it's not for you)
+</I>&gt;<i>
+</I>&gt;<i> iptables is not complaining
+</I>&gt;<i>
+</I>&gt;<i> martians is kernel level, (resource path filtering (for asynchronous routing)),
+</I>&gt;<i> before iptables even comes into play.
+</I>&gt;<i>
+</I>&gt;<i> martians is actually also on the same level as promiscuous checking iinm...
+</I>&gt;<i>
+</I>&gt;<i>
+</I>Ah, thanks for the clarification.
+</PRE>
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+
+ <LI>Next message: <A HREF="007251.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7250">[ date ]</a>
+ <a href="thread.html#7250">[ thread ]</a>
+ <a href="subject.html#7250">[ subject ]</a>
+ <a href="author.html#7250">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007251.html b/zarb-ml/mageia-discuss/20120508/007251.html
new file mode 100644
index 000000000..813d12685
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007251.html
@@ -0,0 +1,94 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA85DEA.9090104%40Rock3d.net%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007250.html">
+ <LINK REL="Next" HREF="007254.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>imnotpc</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA85DEA.9090104%40Rock3d.net%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">imnotpc at Rock3d.net
+ </A><BR>
+ <I>Tue May 8 01:42:34 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007250.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007254.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7251">[ date ]</a>
+ <a href="thread.html#7251">[ thread ]</a>
+ <a href="subject.html#7251">[ subject ]</a>
+ <a href="author.html#7251">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>
+&gt;&gt;<i> Well isn't that interesting. That Comcast IP is the address of the
+</I>&gt;&gt;<i> ISP gateway I use. Both of my firewall/gateway boxes that are logging
+</I>&gt;&gt;<i> martian packets are connected to similar Comcast routers. The routers
+</I>&gt;&gt;<i> are configured in bridge mode so the router DHCP service has no
+</I>&gt;&gt;<i> effect on my connection, but it might still be active on the router.
+</I>&gt;&gt;<i> Also each ISP router also has a wireless interface and that could
+</I>&gt;&gt;<i> still be active. My firewall doesn't block any private IPs coming
+</I>&gt;&gt;<i> from the Internet interface since the ISP routers would never forward
+</I>&gt;&gt;<i> them, so that explains how they get past the firewall.
+</I>&gt;<i>
+</I>&gt;<i> No, I think traceroute doesn't special-case internal IP addresses.
+</I>&gt;<i> Your routing table is (correctly) set up to route traffic for anything
+</I>&gt;<i> other than your known subnets to the external internet, and that's
+</I>&gt;<i> exactly what traceroute is doing. It's your ISP's job to discard
+</I>&gt;<i> internal address packets, not yours.
+</I>&gt;<i>
+</I>&gt;<i> But I think you're on to something with the ISP routers. Is there
+</I>&gt;<i> some reason you don't just run the cable from the cable modem to the
+</I>&gt;<i> external NIC on the gateway PC ? If you're willing to try that, and
+</I>&gt;<i> the martians disappear, it's these routers.
+</I>&gt;<i>
+</I>&gt;<i> Try going into configuration on these routers, and see what their DHCP
+</I>&gt;<i> servers are set up for, and whether the 192.168.3 subnet appears
+</I>&gt;<i> anywhere in there. It's possible that one of your DHCP-using wireless
+</I>&gt;<i> clients is getting an answer to its broadcast from these guys before
+</I>&gt;<i> your internal router, and picking up a 192.168.3.2 IP address from them.
+</I>
+Well the Comcast cable modem was a dead end. I checked it and DHCP is
+disabled, and even if it were enabled it uses a completely different
+subnet. Besides, It would be coming in on eth2 and not eth0. I checked
+the wireless router in the LAN and it uses the 192.168.3.0/24 subnet for
+it's DHCP connections. It has a fixed IP of 192.168.0.100 on the LAN
+interface so I don't know why these IPs would ever be seen by the
+firewall/gateway box, but this looks like the most likely source.
+
+Jeff
+</PRE>
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007250.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007254.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7251">[ date ]</a>
+ <a href="thread.html#7251">[ thread ]</a>
+ <a href="subject.html#7251">[ subject ]</a>
+ <a href="author.html#7251">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007252.html b/zarb-ml/mageia-discuss/20120508/007252.html
new file mode 100644
index 000000000..38ba5d372
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007252.html
@@ -0,0 +1,125 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA86022.3070905%40Rock3d.net%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007259.html">
+ <LINK REL="Next" HREF="007253.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>imnotpc</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA86022.3070905%40Rock3d.net%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">imnotpc at Rock3d.net
+ </A><BR>
+ <I>Tue May 8 01:52:02 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007259.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007253.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7252">[ date ]</a>
+ <a href="thread.html#7252">[ thread ]</a>
+ <a href="subject.html#7252">[ subject ]</a>
+ <a href="author.html#7252">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 05/07/2012 04:47 PM, Maarten Vanraes wrote:
+&gt;<i> Op maandag 07 mei 2012 14:23:44 schreef Frank Griffin:
+</I>&gt;&gt;<i> On 05/07/2012 06:45 AM, Frank Griffin wrote:
+</I>&gt;&gt;&gt;&gt;<i> On 05/06/2012 09:15 PM, imnotpc wrote:
+</I>&gt;&gt;&gt;&gt;<i> 1) Is eth0 the interface facing the internet ?
+</I>&gt;&gt;&gt;<i> No, this interface faces the LAN which has a 192.168.0.0/24 subnet.
+</I>&gt;&gt;<i> OK, so if eth0 has no outside internet access, you are correct in saying
+</I>&gt;&gt;<i> that something in your network is doing this.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;&gt;&gt;<i> 2) Is 173.194.74.154 the IP address assigned (currently) to you by
+</I>&gt;&gt;&gt;&gt;<i> your ISP ?
+</I>&gt;&gt;&gt;<i> No, that IP returns to qe-in-f154.1e100.net which appears to be a
+</I>&gt;&gt;&gt;<i> server owned by Google.
+</I>&gt;&gt;<i> Yes. I thought maybe Google was your ISP.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;&gt;&gt;<i> 4) What does &quot;traceroute 192.168.3.2&quot; from the gateway give ?
+</I>&gt;&gt;&gt;<i> [<A HREF="https://www.mageia.org/mailman/listinfo/mageia-discuss">root at Cedar1</A> /]# traceroute 192.168.3.2
+</I>&gt;&gt;&gt;<i> traceroute to 192.168.3.2 (192.168.3.2), 30 hops max, 60 byte packets
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> 1 74-94-209-242-BusName-VA.hfc.comcastbusiness.net (74.94.209.242)
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> 0.670 ms 1.372 ms 1.686 ms
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> 2 * * *
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> Well isn't that interesting. That Comcast IP is the address of the ISP
+</I>&gt;&gt;&gt;<i> gateway I use. Both of my firewall/gateway boxes that are logging
+</I>&gt;&gt;&gt;<i> martian packets are connected to similar Comcast routers. The routers
+</I>&gt;&gt;&gt;<i> are configured in bridge mode so the router DHCP service has no effect
+</I>&gt;&gt;&gt;<i> on my connection, but it might still be active on the router. Also
+</I>&gt;&gt;&gt;<i> each ISP router also has a wireless interface and that could still be
+</I>&gt;&gt;&gt;<i> active. My firewall doesn't block any private IPs coming from the
+</I>&gt;&gt;&gt;<i> Internet interface since the ISP routers would never forward them, so
+</I>&gt;&gt;&gt;<i> that explains how they get past the firewall.
+</I>&gt;&gt;<i> No, I think traceroute doesn't special-case internal IP addresses. Your
+</I>&gt;&gt;<i> routing table is (correctly) set up to route traffic for anything other
+</I>&gt;&gt;<i> than your known subnets to the external internet, and that's exactly
+</I>&gt;&gt;<i> what traceroute is doing. It's your ISP's job to discard internal
+</I>&gt;&gt;<i> address packets, not yours.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> But I think you're on to something with the ISP routers. Is there some
+</I>&gt;&gt;<i> reason you don't just run the cable from the cable modem to the external
+</I>&gt;&gt;<i> NIC on the gateway PC ? If you're willing to try that, and the martians
+</I>&gt;&gt;<i> disappear, it's these routers.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> Try going into configuration on these routers, and see what their DHCP
+</I>&gt;&gt;<i> servers are set up for, and whether the 192.168.3 subnet appears
+</I>&gt;&gt;<i> anywhere in there. It's possible that one of your DHCP-using wireless
+</I>&gt;&gt;<i> clients is getting an answer to its broadcast from these guys before
+</I>&gt;&gt;<i> your internal router, and picking up a 192.168.3.2 IP address from them.
+</I>&gt;<i>
+</I>&gt;<i> my martians are mostly from: hosts in subnet of my public IP, or internal
+</I>&gt;<i> ranges from modems, and mostly broadcasts or arp stuff.
+</I>&gt;<i>
+</I>&gt;<i> i think this 192.168.3.1 stuff is likely someone in your ISP subnet that is
+</I>&gt;<i> doing bad natting and is trying to get out (much like you pinging 192.168.3.x
+</I>&gt;<i> which is going outside your public ip, that'll get martians on someone elses
+</I>&gt;<i> pc for instance
+</I>
+Since it seems to be coming in on the LAN facing interface, wouldn't it
+be more likely a bad configuration somewhere in my LAN? Everything seems
+to point to my cheap Netgear wireless router even though I just
+rechecked it and it's configured properly (to the best of my knowledge).
+
+Jeff
+</PRE>
+
+
+
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007259.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007253.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7252">[ date ]</a>
+ <a href="thread.html#7252">[ thread ]</a>
+ <a href="subject.html#7252">[ subject ]</a>
+ <a href="author.html#7252">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007253.html b/zarb-ml/mageia-discuss/20120508/007253.html
new file mode 100644
index 000000000..e57a21598
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007253.html
@@ -0,0 +1,125 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA86358.3000409%40Rock3d.net%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007252.html">
+ <LINK REL="Next" HREF="007257.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>imnotpc</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA86358.3000409%40Rock3d.net%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">imnotpc at Rock3d.net
+ </A><BR>
+ <I>Tue May 8 02:05:44 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007252.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007257.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7253">[ date ]</a>
+ <a href="thread.html#7253">[ thread ]</a>
+ <a href="subject.html#7253">[ subject ]</a>
+ <a href="author.html#7253">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 05/07/2012 05:27 PM, Maarten Vanraes wrote:
+&gt;<i> Op maandag 07 mei 2012 23:04:14 schreef Frank Griffin:
+</I>&gt;&gt;<i> On 05/07/2012 04:50 PM, Maarten Vanraes wrote:
+</I>&gt;&gt;&gt;<i> Op maandag 07 mei 2012 14:23:44 schreef Frank Griffin:
+</I>&gt;&gt;&gt;<i> [...]
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> it's like this:
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> mostly people natting will do:
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> iptables -s 192.168.0.0/24 -o eth0 -j MASQUERADE
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> which means internal traffic on 192.168.3.2 would go outside without
+</I>&gt;&gt;&gt;<i> being natted. if someone nearby uses 192.168.3.2 as a local network ip,
+</I>&gt;&gt;&gt;<i> it would get martians, since that network is coming from an unexpected
+</I>&gt;&gt;&gt;<i> source interface.
+</I>&gt;&gt;<i> Yes, but it would go to the ISP gateway and get discarded. Why would it
+</I>&gt;&gt;<i> be seen by anything else on the ISP subnet, unless the NIC were in
+</I>&gt;&gt;<i> promiscuous mode ? And if that (promiscuous mode) were the case, why
+</I>&gt;&gt;<i> would iptables complain ?
+</I>&gt;<i> promiscuous mode means you're passing through from layer 2 to layer 3
+</I>&gt;<i> irrespective of mac address (ie: even if it's not for you)
+</I>&gt;<i>
+</I>&gt;<i> iptables is not complaining
+</I>&gt;<i>
+</I>&gt;<i> martians is kernel level, (resource path filtering (for asynchronous routing)),
+</I>&gt;<i> before iptables even comes into play.
+</I>
+So the kernel would log the martian before iptables sees it? That
+explains why it isn't dropped by the firewall. But that begs the
+question, is there any point in using iptables rules to block packets
+from other subnets if iptables will never see them? Just about every
+sample firewall ruleset I've ever seen does this either explicitly or by
+allowing them to fall through to the default DROP rule. Now that I'm
+thinking back, in 10+ years of Linux LAN experience I've never seen a
+martian packet logged by any of my firewalls. i just assumed it was good
+network management ;-)
+
+&gt;<i>
+</I>&gt;<i> martians is actually also on the same level as promiscuous checking iinm...
+</I>&gt;<i>
+</I>&gt;<i> ie: it's disregarding an ip packet on an interface, which should not have come
+</I>&gt;<i> from that interface, but according to routing information, you expect it to
+</I>&gt;<i> come from another interface.
+</I>&gt;<i>
+</I>&gt;<i> ie: if you have:
+</I>&gt;<i> eth0: 192.168.0.2/24
+</I>&gt;<i> eth1: 192.168.1.5/24
+</I>&gt;<i> eth2: 75.124.56.84
+</I>&gt;<i> and default route via eth2
+</I>&gt;<i>
+</I>&gt;<i> if coming from eth2 there is a packet with source IP 192.168.1.54, it would
+</I>&gt;<i> fire.
+</I>&gt;<i>
+</I>&gt;<i> if going out to eth1 a packet with dest IP 192.168.0.6 it would also fire.
+</I>&gt;<i>
+</I>&gt;<i> if coming from eth0 is a packet with source ip 192.168.3.8, it also fires,
+</I>&gt;<i> since default route is eth2.
+</I>&gt;<i>
+</I>&gt;<i> i donno if you see an interface which it's speaking of in the martians
+</I>&gt;<i> warning, but i suggest you look at the routing table and see what is going on.
+</I>&gt;<i>
+</I>&gt;<i> you can furthermore try to use tcpdump and see what is going on.
+</I>
+I'll give this a try and see what I dig up.
+</PRE>
+
+
+
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007252.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007257.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7253">[ date ]</a>
+ <a href="thread.html#7253">[ thread ]</a>
+ <a href="subject.html#7253">[ subject ]</a>
+ <a href="author.html#7253">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007254.html b/zarb-ml/mageia-discuss/20120508/007254.html
new file mode 100644
index 000000000..b50f40b43
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007254.html
@@ -0,0 +1,77 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA8F9A4.30706%40roadrunner.com%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007251.html">
+ <LINK REL="Next" HREF="007255.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>Frank Griffin</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA8F9A4.30706%40roadrunner.com%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">ftg at roadrunner.com
+ </A><BR>
+ <I>Tue May 8 12:47:00 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007251.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007255.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7254">[ date ]</a>
+ <a href="thread.html#7254">[ thread ]</a>
+ <a href="subject.html#7254">[ subject ]</a>
+ <a href="author.html#7254">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 05/07/2012 07:42 PM, imnotpc wrote:
+&gt;<i>
+</I>&gt;<i> Well the Comcast cable modem was a dead end. I checked it and DHCP is
+</I>&gt;<i> disabled, and even if it were enabled it uses a completely different
+</I>&gt;<i> subnet. Besides, It would be coming in on eth2 and not eth0. I checked
+</I>&gt;<i> the wireless router in the LAN and it uses the 192.168.3.0/24 subnet
+</I>&gt;<i> for it's DHCP connections. It has a fixed IP of 192.168.0.100 on the
+</I>&gt;<i> LAN interface so I don't know why these IPs would ever be seen by the
+</I>&gt;<i> firewall/gateway box, but this looks like the most likely source.
+</I>Waitaminnit. Yesterday you wrote:
+
+&gt;<i>
+</I>&gt;<i> Wireless Router Attached to the LAN: The LAN facing NIC on the
+</I>&gt;<i> wireless router has a fixed IP of 192.168.0.100. The wireless
+</I>&gt;<i> interface is configured to assign IPs in the 192.168.2.0/24 range to
+</I>&gt;<i> the wireless hosts using DHCP.
+</I>
+If the wireless router DHCP is setup to assign from 192.168.3.0/24, then
+that's where the 192.168.3.2 is coming from. Unless your gateway is set
+to masquerade 192.168.3.0/24, you get exactly what you're seeing.
+
+</PRE>
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007251.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007255.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7254">[ date ]</a>
+ <a href="thread.html#7254">[ thread ]</a>
+ <a href="subject.html#7254">[ subject ]</a>
+ <a href="author.html#7254">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007255.html b/zarb-ml/mageia-discuss/20120508/007255.html
new file mode 100644
index 000000000..23b14a4a2
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007255.html
@@ -0,0 +1,84 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA911E7.9030801%40Rock3d.net%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007254.html">
+ <LINK REL="Next" HREF="007256.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>imnotpc</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA911E7.9030801%40Rock3d.net%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">imnotpc at Rock3d.net
+ </A><BR>
+ <I>Tue May 8 14:30:31 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007254.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007256.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7255">[ date ]</a>
+ <a href="thread.html#7255">[ thread ]</a>
+ <a href="subject.html#7255">[ subject ]</a>
+ <a href="author.html#7255">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 05/08/2012 06:47 AM, Frank Griffin wrote:
+&gt;<i> On 05/07/2012 07:42 PM, imnotpc wrote:
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> Well the Comcast cable modem was a dead end. I checked it and DHCP is
+</I>&gt;&gt;<i> disabled, and even if it were enabled it uses a completely different
+</I>&gt;&gt;<i> subnet. Besides, It would be coming in on eth2 and not eth0. I
+</I>&gt;&gt;<i> checked the wireless router in the LAN and it uses the 192.168.3.0/24
+</I>&gt;&gt;<i> subnet for it's DHCP connections. It has a fixed IP of 192.168.0.100
+</I>&gt;&gt;<i> on the LAN interface so I don't know why these IPs would ever be seen
+</I>&gt;&gt;<i> by the firewall/gateway box, but this looks like the most likely source.
+</I>&gt;<i> Waitaminnit. Yesterday you wrote:
+</I>&gt;<i>
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> Wireless Router Attached to the LAN: The LAN facing NIC on the
+</I>&gt;&gt;<i> wireless router has a fixed IP of 192.168.0.100. The wireless
+</I>&gt;&gt;<i> interface is configured to assign IPs in the 192.168.2.0/24 range to
+</I>&gt;&gt;<i> the wireless hosts using DHCP.
+</I>&gt;<i>
+</I>&gt;<i> If the wireless router DHCP is setup to assign from 192.168.3.0/24,
+</I>&gt;<i> then that's where the 192.168.3.2 is coming from. Unless your gateway
+</I>&gt;<i> is set to masquerade 192.168.3.0/24, you get exactly what you're seeing.
+</I>&gt;<i>
+</I>
+Yes, that was a typo. 192.168.3.0/24 is correct. But the wireless router
+has to NAT those addresses to 192.168.0.100 or no traffic would get
+through. In order for the martian packets to be coming from the wireless
+router then it would have to be selectively NATing some packets and not
+others.
+</PRE>
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007254.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007256.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7255">[ date ]</a>
+ <a href="thread.html#7255">[ thread ]</a>
+ <a href="subject.html#7255">[ subject ]</a>
+ <a href="author.html#7255">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007256.html b/zarb-ml/mageia-discuss/20120508/007256.html
new file mode 100644
index 000000000..79fe9dd4e
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007256.html
@@ -0,0 +1,75 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA963EE.6010108%40roadrunner.com%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007255.html">
+ <LINK REL="Next" HREF="007259.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>Frank Griffin</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA963EE.6010108%40roadrunner.com%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">ftg at roadrunner.com
+ </A><BR>
+ <I>Tue May 8 20:20:30 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007255.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007259.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7256">[ date ]</a>
+ <a href="thread.html#7256">[ thread ]</a>
+ <a href="subject.html#7256">[ subject ]</a>
+ <a href="author.html#7256">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 05/08/2012 08:30 AM, imnotpc wrote:
+&gt;<i>
+</I>&gt;<i>
+</I>&gt;<i> Yes, that was a typo. 192.168.3.0/24 is correct. But the wireless
+</I>&gt;<i> router has to NAT those addresses to 192.168.0.100 or no traffic would
+</I>&gt;<i> get through. In order for the martian packets to be coming from the
+</I>&gt;<i> wireless router then it would have to be selectively NATing some
+</I>&gt;<i> packets and not others.
+</I>&gt;<i>
+</I>
+Now that's interesting. In my own setup, I simply use the router as a
+wireless access point, and I disable its DHCP server so as to use the
+one on my gateway. I've just verified with wireshark on my gateway that
+the router isn't NATing anything; all packets from my wireless systems
+show up at the gateway with their assigned 192.168.3.0/24 addresses.
+
+Maybe the router doesn't NAT unless the wireless node has an IP address
+that it assigned. Is 192.168.3.2 perhaps a fixed IP address that one of
+your wireless systems is using ?
+</PRE>
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007255.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007259.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7256">[ date ]</a>
+ <a href="thread.html#7256">[ thread ]</a>
+ <a href="subject.html#7256">[ subject ]</a>
+ <a href="author.html#7256">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007257.html b/zarb-ml/mageia-discuss/20120508/007257.html
new file mode 100644
index 000000000..eeef8ef86
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007257.html
@@ -0,0 +1,79 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C201205082117.27711.alien%40rmail.be%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007253.html">
+ <LINK REL="Next" HREF="007258.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>Maarten Vanraes</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C201205082117.27711.alien%40rmail.be%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">alien at rmail.be
+ </A><BR>
+ <I>Tue May 8 21:17:27 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007253.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007258.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7257">[ date ]</a>
+ <a href="thread.html#7257">[ thread ]</a>
+ <a href="subject.html#7257">[ subject ]</a>
+ <a href="author.html#7257">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>Op dinsdag 08 mei 2012 02:05:44 schreef imnotpc:
+[...]
+&gt;<i> &gt; promiscuous mode means you're passing through from layer 2 to layer 3
+</I>&gt;<i> &gt; irrespective of mac address (ie: even if it's not for you)
+</I>&gt;<i> &gt;
+</I>&gt;<i> &gt; iptables is not complaining
+</I>&gt;<i> &gt;
+</I>&gt;<i> &gt; martians is kernel level, (resource path filtering (for asynchronous
+</I>&gt;<i> &gt; routing)), before iptables even comes into play.
+</I>&gt;<i>
+</I>&gt;<i> So the kernel would log the martian before iptables sees it? That
+</I>&gt;<i> explains why it isn't dropped by the firewall. But that begs the
+</I>&gt;<i> question, is there any point in using iptables rules to block packets
+</I>&gt;<i> from other subnets if iptables will never see them? Just about every
+</I>&gt;<i> sample firewall ruleset I've ever seen does this either explicitly or by
+</I>&gt;<i> allowing them to fall through to the default DROP rule. Now that I'm
+</I>&gt;<i> thinking back, in 10+ years of Linux LAN experience I've never seen a
+</I>&gt;<i> martian packet logged by any of my firewalls. i just assumed it was good
+</I>&gt;<i> network management ;-)
+</I>
+yes, because rp_filter level can be adjusted in the kernel :-)
+
+</PRE>
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007253.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007258.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7257">[ date ]</a>
+ <a href="thread.html#7257">[ thread ]</a>
+ <a href="subject.html#7257">[ subject ]</a>
+ <a href="author.html#7257">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007258.html b/zarb-ml/mageia-discuss/20120508/007258.html
new file mode 100644
index 000000000..42d5395a8
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007258.html
@@ -0,0 +1,76 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA973D3.8010807%40Rock3d.net%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007257.html">
+
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>imnotpc</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA973D3.8010807%40Rock3d.net%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">imnotpc at Rock3d.net
+ </A><BR>
+ <I>Tue May 8 21:28:19 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007257.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7258">[ date ]</a>
+ <a href="thread.html#7258">[ thread ]</a>
+ <a href="subject.html#7258">[ subject ]</a>
+ <a href="author.html#7258">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 05/08/2012 03:17 PM, Maarten Vanraes wrote:
+&gt;<i> Op dinsdag 08 mei 2012 02:05:44 schreef imnotpc:
+</I>&gt;<i> [...]
+</I>&gt;&gt;&gt;<i> promiscuous mode means you're passing through from layer 2 to layer 3
+</I>&gt;&gt;&gt;<i> irrespective of mac address (ie: even if it's not for you)
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> iptables is not complaining
+</I>&gt;&gt;&gt;<i>
+</I>&gt;&gt;&gt;<i> martians is kernel level, (resource path filtering (for asynchronous
+</I>&gt;&gt;&gt;<i> routing)), before iptables even comes into play.
+</I>&gt;&gt;<i> So the kernel would log the martian before iptables sees it? That
+</I>&gt;&gt;<i> explains why it isn't dropped by the firewall. But that begs the
+</I>&gt;&gt;<i> question, is there any point in using iptables rules to block packets
+</I>&gt;&gt;<i> from other subnets if iptables will never see them? Just about every
+</I>&gt;&gt;<i> sample firewall ruleset I've ever seen does this either explicitly or by
+</I>&gt;&gt;<i> allowing them to fall through to the default DROP rule. Now that I'm
+</I>&gt;&gt;<i> thinking back, in 10+ years of Linux LAN experience I've never seen a
+</I>&gt;&gt;<i> martian packet logged by any of my firewalls. i just assumed it was good
+</I>&gt;&gt;<i> network management ;-)
+</I>&gt;<i> yes, because rp_filter level can be adjusted in the kernel :-)
+</I>&gt;<i>
+</I>Ah, so it was my good network management then, hehe. Good info, thanks.
+</PRE>
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007257.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7258">[ date ]</a>
+ <a href="thread.html#7258">[ thread ]</a>
+ <a href="subject.html#7258">[ subject ]</a>
+ <a href="author.html#7258">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/007259.html b/zarb-ml/mageia-discuss/20120508/007259.html
new file mode 100644
index 000000000..7e76502ee
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/007259.html
@@ -0,0 +1,86 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Odd entry in log file
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA97509.9080308%40Rock3d.net%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="007256.html">
+ <LINK REL="Next" HREF="007252.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Odd entry in log file</H1>
+ <B>imnotpc</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Odd%20entry%20in%20log%20file&In-Reply-To=%3C4FA97509.9080308%40Rock3d.net%3E"
+ TITLE="[Mageia-discuss] Odd entry in log file">imnotpc at Rock3d.net
+ </A><BR>
+ <I>Tue May 8 21:33:29 CEST 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="007256.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007252.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7259">[ date ]</a>
+ <a href="thread.html#7259">[ thread ]</a>
+ <a href="subject.html#7259">[ subject ]</a>
+ <a href="author.html#7259">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On 05/08/2012 02:20 PM, Frank Griffin wrote:
+&gt;<i> On 05/08/2012 08:30 AM, imnotpc wrote:
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> Yes, that was a typo. 192.168.3.0/24 is correct. But the wireless
+</I>&gt;&gt;<i> router has to NAT those addresses to 192.168.0.100 or no traffic
+</I>&gt;&gt;<i> would get through. In order for the martian packets to be coming from
+</I>&gt;&gt;<i> the wireless router then it would have to be selectively NATing some
+</I>&gt;&gt;<i> packets and not others.
+</I>&gt;&gt;<i>
+</I>&gt;<i>
+</I>&gt;<i> Now that's interesting. In my own setup, I simply use the router as a
+</I>&gt;<i> wireless access point, and I disable its DHCP server so as to use the
+</I>&gt;<i> one on my gateway. I've just verified with wireshark on my gateway
+</I>&gt;<i> that the router isn't NATing anything; all packets from my wireless
+</I>&gt;<i> systems show up at the gateway with their assigned 192.168.3.0/24
+</I>&gt;<i> addresses.
+</I>&gt;<i>
+</I>&gt;<i> Maybe the router doesn't NAT unless the wireless node has an IP
+</I>&gt;<i> address that it assigned. Is 192.168.3.2 perhaps a fixed IP address
+</I>&gt;<i> that one of your wireless systems is using ?
+</I>
+No, I don't set any fixed IPs in the subnets that use DHCP although I
+believe the wireless router would allow me to. Also the 192.168.3.x
+address changes. I get martian logs from other addresses in that subnet
+but they are always low numbers which makes me think they were actually
+assigned by the router, at least initially. I haven't had time to run
+tcpdump yet but my current theory is that the wireless router doesn't or
+can't NAT certain types of packets and those are triggering the kernel
+log messages. Or perhaps it's only NATing packets from a host with a
+valid DHCP lease and simply forwarding anything else that comes in.
+</PRE>
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="007256.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI>Next message: <A HREF="007252.html">[Mageia-discuss] Odd entry in log file
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#7259">[ date ]</a>
+ <a href="thread.html#7259">[ thread ]</a>
+ <a href="subject.html#7259">[ subject ]</a>
+ <a href="author.html#7259">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>
diff --git a/zarb-ml/mageia-discuss/20120508/author.html b/zarb-ml/mageia-discuss/20120508/author.html
new file mode 100644
index 000000000..5d3582607
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/author.html
@@ -0,0 +1,97 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <title>The Mageia-discuss 8 May 2012 Archive by author</title>
+ <META NAME="robots" CONTENT="noindex,follow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <a name="start"></A>
+ <h1>8 May 2012 Archives by author</h1>
+ <ul>
+ <li> <b>Messages sorted by:</b>
+ <a href="thread.html#start">[ thread ]</a>
+ <a href="subject.html#start">[ subject ]</a>
+
+ <a href="date.html#start">[ date ]</a>
+
+ <li><b><a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More info on this list...
+ </a></b></li>
+ </ul>
+ <p><b>Starting:</b> <i>Tue May 8 01:23:40 CEST 2012</i><br>
+ <b>Ending:</b> <i>Tue May 8 21:33:29 CEST 2012</i><br>
+ <b>Messages:</b> 10<p>
+ <ul>
+
+<LI><A HREF="007250.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7250">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007254.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7254">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007256.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7256">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007257.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7257">&nbsp;</A>
+<I>Maarten Vanraes
+</I>
+
+<LI><A HREF="007251.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7251">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007252.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7252">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007253.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7253">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007255.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7255">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007258.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7258">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007259.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7259">&nbsp;</A>
+<I>imnotpc
+</I>
+
+ </ul>
+ <p>
+ <a name="end"><b>Last message date:</b></a>
+ <i>Tue May 8 21:33:29 CEST 2012</i><br>
+ <b>Archived on:</b> <i>Tue May 8 21:33:35 CEST 2012</i>
+ <p>
+ <ul>
+ <li> <b>Messages sorted by:</b>
+ <a href="thread.html#start">[ thread ]</a>
+ <a href="subject.html#start">[ subject ]</a>
+
+ <a href="date.html#start">[ date ]</a>
+ <li><b><a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More info on this list...
+ </a></b></li>
+ </ul>
+ <p>
+ <hr>
+ <i>This archive was generated by
+ Pipermail 0.09 (Mailman edition).</i>
+ </BODY>
+</HTML>
+
diff --git a/zarb-ml/mageia-discuss/20120508/date.html b/zarb-ml/mageia-discuss/20120508/date.html
new file mode 100644
index 000000000..b3635f7e5
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/date.html
@@ -0,0 +1,97 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <title>The Mageia-discuss 8 May 2012 Archive by date</title>
+ <META NAME="robots" CONTENT="noindex,follow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <a name="start"></A>
+ <h1>8 May 2012 Archives by date</h1>
+ <ul>
+ <li> <b>Messages sorted by:</b>
+ <a href="thread.html#start">[ thread ]</a>
+ <a href="subject.html#start">[ subject ]</a>
+ <a href="author.html#start">[ author ]</a>
+
+
+ <li><b><a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More info on this list...
+ </a></b></li>
+ </ul>
+ <p><b>Starting:</b> <i>Tue May 8 01:23:40 CEST 2012</i><br>
+ <b>Ending:</b> <i>Tue May 8 21:33:29 CEST 2012</i><br>
+ <b>Messages:</b> 10<p>
+ <ul>
+
+<LI><A HREF="007250.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7250">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007251.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7251">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007252.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7252">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007253.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7253">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007254.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7254">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007255.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7255">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007256.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7256">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007257.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7257">&nbsp;</A>
+<I>Maarten Vanraes
+</I>
+
+<LI><A HREF="007258.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7258">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007259.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7259">&nbsp;</A>
+<I>imnotpc
+</I>
+
+ </ul>
+ <p>
+ <a name="end"><b>Last message date:</b></a>
+ <i>Tue May 8 21:33:29 CEST 2012</i><br>
+ <b>Archived on:</b> <i>Tue May 8 21:33:35 CEST 2012</i>
+ <p>
+ <ul>
+ <li> <b>Messages sorted by:</b>
+ <a href="thread.html#start">[ thread ]</a>
+ <a href="subject.html#start">[ subject ]</a>
+ <a href="author.html#start">[ author ]</a>
+
+ <li><b><a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More info on this list...
+ </a></b></li>
+ </ul>
+ <p>
+ <hr>
+ <i>This archive was generated by
+ Pipermail 0.09 (Mailman edition).</i>
+ </BODY>
+</HTML>
+
diff --git a/zarb-ml/mageia-discuss/20120508/index.html b/zarb-ml/mageia-discuss/20120508/index.html
new file mode 120000
index 000000000..db4b46f72
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/index.html
@@ -0,0 +1 @@
+thread.html \ No newline at end of file
diff --git a/zarb-ml/mageia-discuss/20120508/subject.html b/zarb-ml/mageia-discuss/20120508/subject.html
new file mode 100644
index 000000000..2aa2dcd81
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/subject.html
@@ -0,0 +1,97 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <title>The Mageia-discuss 8 May 2012 Archive by subject</title>
+ <META NAME="robots" CONTENT="noindex,follow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <a name="start"></A>
+ <h1>8 May 2012 Archives by subject</h1>
+ <ul>
+ <li> <b>Messages sorted by:</b>
+ <a href="thread.html#start">[ thread ]</a>
+
+ <a href="author.html#start">[ author ]</a>
+ <a href="date.html#start">[ date ]</a>
+
+ <li><b><a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More info on this list...
+ </a></b></li>
+ </ul>
+ <p><b>Starting:</b> <i>Tue May 8 01:23:40 CEST 2012</i><br>
+ <b>Ending:</b> <i>Tue May 8 21:33:29 CEST 2012</i><br>
+ <b>Messages:</b> 10<p>
+ <ul>
+
+<LI><A HREF="007250.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7250">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007251.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7251">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007252.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7252">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007253.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7253">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007254.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7254">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007255.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7255">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007256.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7256">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<LI><A HREF="007257.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7257">&nbsp;</A>
+<I>Maarten Vanraes
+</I>
+
+<LI><A HREF="007258.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7258">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<LI><A HREF="007259.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7259">&nbsp;</A>
+<I>imnotpc
+</I>
+
+ </ul>
+ <p>
+ <a name="end"><b>Last message date:</b></a>
+ <i>Tue May 8 21:33:29 CEST 2012</i><br>
+ <b>Archived on:</b> <i>Tue May 8 21:33:35 CEST 2012</i>
+ <p>
+ <ul>
+ <li> <b>Messages sorted by:</b>
+ <a href="thread.html#start">[ thread ]</a>
+
+ <a href="author.html#start">[ author ]</a>
+ <a href="date.html#start">[ date ]</a>
+ <li><b><a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More info on this list...
+ </a></b></li>
+ </ul>
+ <p>
+ <hr>
+ <i>This archive was generated by
+ Pipermail 0.09 (Mailman edition).</i>
+ </BODY>
+</HTML>
+
diff --git a/zarb-ml/mageia-discuss/20120508/thread.html b/zarb-ml/mageia-discuss/20120508/thread.html
new file mode 100644
index 000000000..72cae3c74
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20120508/thread.html
@@ -0,0 +1,117 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <title>The Mageia-discuss 8 May 2012 Archive by thread</title>
+ <META NAME="robots" CONTENT="noindex,follow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <a name="start"></A>
+ <h1>8 May 2012 Archives by thread</h1>
+ <ul>
+ <li> <b>Messages sorted by:</b>
+
+ <a href="subject.html#start">[ subject ]</a>
+ <a href="author.html#start">[ author ]</a>
+ <a href="date.html#start">[ date ]</a>
+
+ <li><b><a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More info on this list...
+ </a></b></li>
+ </ul>
+ <p><b>Starting:</b> <i>Tue May 8 01:23:40 CEST 2012</i><br>
+ <b>Ending:</b> <i>Tue May 8 21:33:29 CEST 2012</i><br>
+ <b>Messages:</b> 10<p>
+ <ul>
+
+<!--0 01336433020- -->
+<LI><A HREF="007250.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7250">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<!--0 01336434154- -->
+<LI><A HREF="007251.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7251">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<UL>
+<!--1 01336434154-01336474020- -->
+<LI><A HREF="007254.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7254">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<UL>
+<!--2 01336434154-01336474020-01336480231- -->
+<LI><A HREF="007255.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7255">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<UL>
+<!--3 01336434154-01336474020-01336480231-01336501230- -->
+<LI><A HREF="007256.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7256">&nbsp;</A>
+<I>Frank Griffin
+</I>
+
+<!--3 01336434154-01336474020-01336480231-01336501230-01336505609- -->
+<LI><A HREF="007259.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7259">&nbsp;</A>
+<I>imnotpc
+</I>
+
+</UL>
+</UL>
+</UL>
+<!--0 01336434722- -->
+<LI><A HREF="007252.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7252">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<!--0 01336435544- -->
+<LI><A HREF="007253.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7253">&nbsp;</A>
+<I>imnotpc
+</I>
+
+<UL>
+<!--1 01336435544-01336504647- -->
+<LI><A HREF="007257.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7257">&nbsp;</A>
+<I>Maarten Vanraes
+</I>
+
+<UL>
+<!--2 01336435544-01336504647-01336505299- -->
+<LI><A HREF="007258.html">[Mageia-discuss] Odd entry in log file
+</A><A NAME="7258">&nbsp;</A>
+<I>imnotpc
+</I>
+
+</UL>
+</UL>
+ </ul>
+ <p>
+ <a name="end"><b>Last message date:</b></a>
+ <i>Tue May 8 21:33:29 CEST 2012</i><br>
+ <b>Archived on:</b> <i>Tue May 8 21:33:35 CEST 2012</i>
+ <p>
+ <ul>
+ <li> <b>Messages sorted by:</b>
+
+ <a href="subject.html#start">[ subject ]</a>
+ <a href="author.html#start">[ author ]</a>
+ <a href="date.html#start">[ date ]</a>
+ <li><b><a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More info on this list...
+ </a></b></li>
+ </ul>
+ <p>
+ <hr>
+ <i>This archive was generated by
+ Pipermail 0.09 (Mailman edition).</i>
+ </BODY>
+</HTML>
+