[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: spoof messages



Thanks, Harry.

Disable the martian alerting means the system won't record down the 
message for this. Is there any way that we can reject or allerviate the 
spoof?

Jessica


On Mon, 6 Jun 2005, Harry Hoffman wrote:

> Hi Jessica,
> 
> You can disable the martian alerting via sysctl
> 
> HTH,
> Harry
> 
> Jessica Zhu wrote:
> > Is there any firewall rule which can stop this?
> > 
> > Jessica
> > 
> > 
> > On Mon, 6 Jun 2005, Jessica Zhu wrote:
> > 
> > 
> >>Hi,
> >>
> >>In our /var/log/messages, there are such messages on two of our servers.
> >>
> >>Jun  6 15:08:59 app2 kernel: martian source 0100007f for xxxxxxxx, dev 
> >>eth1
> >>Jun  6 15:08:59 app2 kernel: ll header: ff ff ff ff ff ff 00 02 b3 a3 0d 
> >>c6 08 06 
> >>
> >>(Sorry for using x)
> >>
> >>Checking the xxxxxxxx, it was the hex number which stands for one 
> >>of our server(not app1) on the site. 
> >>
> >>This message appears in the log every 10 minutes. What's going on? And how 
> >>to get rid of the cause of this and thus get rid of the messages.
> >>
> >>Jessica
> >> 
> >>
> >>
> >>
> > 
> > 
> 
> 



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]