Forum OpenACS Q&A: Can anyone help with these messages?

Posted by Daniel Stafford on 06/12/01 07:49 PM

Greetings,

I have an OpenACS site (goroots.com) that's been up for quite a while
and speaks well of you all.
Recently I've noticed the following entries being added to my server
log (/var/log/messages) at a rate of 3/interface (eth0 and eth1) every
second. I see that the protocol is udp (PROTO=17) and from
/etc/services the services are bootps (67) and bootpc (68). I have
implemented firewallss so DENY almost everything. The source
ip points to ha1.svc1.ct.home.com. Since I live in CT and use Cox
Cable's @home cable service, it looks like it may be one of their
hosts.

Any suggestions on how to solve this problem?

1 log entry:

Jun 10 04:02:04 warrior kernel: Packet log: input DENY eth0
PROTO=17 24.2.0.12:67 255.255.255.255:68 L=576 S=0x00 I=0x0000
T=252 (#12)

2: Response to Can anyone help with these messages? (response to 1)

Posted by David Walker on 06/12/01 08:02 PM

I suggest either denying without logging or accepting without logging. I think if you deny it you disable @home's dhcp. Personally I accept it and have a script to restart my firewall with the new IP if they change the IP with DHCP. (They haven't done that very often though).