hi there,
if i start anti-portscann i get the following messages in mdw.log:
robert
if i start anti-portscann i get the following messages in mdw.log:
Quote:
|
2012:03:05-11:45:20 firewall middleware[17047]: T main::top-level:210() => starting cycle 7, caught 1 signals 2012:03:05-11:45:20 firewall middleware[17047]: T core::Config::Changed:140() => configversion=742 2012:03:05-11:45:20 firewall middleware[17047]: T core::Config::Changed:150() => nodes=1 objects=0 triggers=0 2012:03:05-11:45:20 firewall middleware[17047]: T core::Config::load:274() => modules=1,1 2012:03:05-11:45:20 firewall middleware[17047]: T main::top-level:257() => ending cycle 7, caught 0 signals, 0 children still running 2012:03:05-11:45:24 firewall middleware[17047]: T main::top-level:210() => starting cycle 8, caught 1 signals 2012:03:05-11:45:24 firewall middleware[17047]: T core::Config::Changed:140() => configversion=743 2012:03:05-11:45:24 firewall middleware[17047]: T core::Config::Changed:150() => nodes=1 objects=0 triggers=0 2012:03:05-11:45:24 firewall middleware[17047]: T core::Config::load:274() => modules=1,1 2012:03:05-11:45:24 firewall middleware[17047]: >================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 3: -A PSD_MATCH "-s 10.10.30.5/32" -j RETURN 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:143() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: |================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 4: -A PSD_MATCH "-s 10.10.100.12/32" -j RETURN 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:143() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: |================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 5: -A PSD_MATCH "-s 10.10.30.5/32" "-d 10.10.100.20/32" -j RETURN 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:143() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: |================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 6: -A PSD_MATCH "-s 10.10.10.0/24" -j RETURN 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:143() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: |================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 7: -A PSD_MATCH "-s 10.10.10.0/24" "-s 10.10.10.0/24" -j RETURN 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:143() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: |================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 8: -A PSD_MATCH "-s 10.10.100.10/32" -j RETURN 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:143() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: |================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 9: -A PSD_MATCH -i eth6 -m psd --psd-weight-threshold 21 --psd-delay-threshold 300 --psd-lo-ports-weight 3 --psd-hi-ports-weight 1 -j PSD_ACTION 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:143() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: |================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 10: -A PSD_MATCH -i eth7 -m psd --psd-weight-threshold 21 --psd-delay-threshold 300 --psd-lo-ports-weight 3 --psd-hi-ports-weight 1 -j PSD_ACTION 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:143() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: |================================================= ======================== 2012:03:05-11:45:24 firewall middleware[17047]: E 11: COMMIT 2012:03:05-11:45:24 firewall middleware[17047]: 2012:03:05-11:45:24 firewall middleware[17047]: 1. utils::IPTables::commitRules:145() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 2. utils::IPTables::EOT:69() /</var/mdw/mdw.plx>utils/IPTables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 3. modules::IPTables::Table::setRules:290() /</var/mdw/mdw.plx>modules/IPTables/Table.pm 2012:03:05-11:45:24 firewall middleware[17047]: 4. modules::iptables::setAll:197() /</var/mdw/mdw.plx>modules/iptables.pm 2012:03:05-11:45:24 firewall middleware[17047]: 5. main::top-level:223() mdw.pl 2012:03:05-11:45:24 firewall middleware[17047]: T main::top-level:257() => ending cycle 8, caught 0 signals, 0 children still running |