pptpd und SuSEfirewall2

[robi1a]

Log 2/2 (FW blockt):

Oct 7 19:30:08 grisu pppd[13685]: rcvd [IPCP ConfReq id=0x4 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins
0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Oct 7 19:30:08 grisu pppd[13685]: sent [IPCP ConfRej id=0x4 <ms-wins 0.0.0.0> <ms-wins 0.0.0.0>]
Oct 7 19:30:08 grisu pppd[13685]: rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
Oct 7 19:30:08 grisu pppd[13685]: sent [IPCP ConfReq id=0x2 <addr 192.168.9.100>]
Oct 7 19:30:08 grisu pppd[13685]: rcvd [CCP ConfRej id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>
]
Oct 7 19:30:08 grisu pppd[13685]: sent [CCP ConfReq id=0x2 <mppe 1 0 0 40>]
Oct 7 19:30:08 grisu pppd[13685]: rcvd [CCP ConfReq id=0x5 <mppe 1 0 0 40>]
Oct 7 19:30:08 grisu pppd[13685]: sent [CCP ConfAck id=0x5 <mppe 1 0 0 40>]
Oct 7 19:30:08 grisu pppd[13685]: rcvd [IPCP ConfReq id=0x6 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3
0.0.0.0>]
Oct 7 19:30:08 grisu pppd[13685]: sent [IPCP ConfNak id=0x6 <addr 192.168.9.200> <ms-dns1 217.76.160.6
> <ms-dns3 217.76.160.6>]
Oct 7 19:30:08 grisu pppd[13685]: rcvd [IPCP ConfAck id=0x2 <addr 192.168.9.100>]
Oct 7 19:30:08 grisu pppd[13685]: rcvd [CCP ConfAck id=0x2 <mppe 1 0 0 40>]
Oct 7 19:30:08 grisu pppd[13685]: MPPE 128 bit, stateless compression enabled
Oct 7 19:30:08 grisu pppd[13685]: rcvd [IPCP ConfReq id=0x7 <addr 192.168.9.200> <ms-dns1 217.76.160.6
> <ms-dns3 217.76.160.6>]
Oct 7 19:30:08 grisu pppd[13685]: sent [IPCP ConfAck id=0x7 <addr 192.168.9.200> <ms-dns1 217.76.160.6
> <ms-dns3 217.76.160.6>]
Oct 7 19:30:08 grisu pppd[13685]: local IP address 192.168.9.100
Oct 7 19:30:08 grisu pppd[13685]: remote IP address 192.168.9.200
Oct 7 19:30:08 grisu pppd[13685]: Script /etc/ppp/ip-up started (pid 13694)
Oct 7 19:30:08 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.168.9.200 DST=255.255.25
5.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=28523 PROTO=UDP SPT=137 DPT=137 LEN=76
Oct 7 19:30:09 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.168.9.200 DST=255.255.25
5.255 LEN=328 TOS=0x00 PREC=0x00 TTL=128 ID=28525 PROTO=UDP SPT=68 DPT=67 LEN=308
Oct 7 19:30:09 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.168.9.200 DST=255.255.25
5.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=28573 PROTO=UDP SPT=137 DPT=137 LEN=76
Oct 7 19:30:10 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.168.9.200 DST=255.255.25
5.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=28626 PROTO=UDP SPT=137 DPT=137 LEN=76
Oct 7 19:30:11 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.168.9.200 DST=255.255.25
5.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=28653 PROTO=UDP SPT=137 DPT=137 LEN=76
Oct 7 19:30:11 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.168.9.200 DST=255.255.25
5.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=28707 PROTO=UDP SPT=137 DPT=137 LEN=76
Oct 7 19:30:12 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.168.9.200 DST=255.255.25
5.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=28752 PROTO=UDP SPT=137 DPT=137 LEN=76
Oct 7 19:30:13 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=ppp0 OUT= MAC= SRC=192.168.9.200 DST=255.255.25
5.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=28802 PROTO=UDP SPT=137 DPT=137 LEN=76
Oct 7 19:30:14 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=eth0 OUT= MAC=00:02:44:4e:33:7f:00:b0:64:8c:cb:
54:08:00 SRC=84.113.129.173 DST=217.76.164.189 LEN=133 TOS=0x00 PREC=0x00 TTL=116 ID=28886 PROTO=47
Oct 7 19:30:14 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=eth0 OUT= MAC=00:02:44:4e:33:7f:00:b0:64:8c:cb:
54:08:00 SRC=84.113.129.173 DST=217.76.164.189 LEN=133 TOS=0x00 PREC=0x00 TTL=116 ID=28888 PROTO=47
Oct 7 19:30:15 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=eth0 OUT= MAC=00:02:44:4e:33:7f:00:b0:64:8c:cb:
54:08:00 SRC=84.113.129.173 DST=217.76.164.189 LEN=40 TOS=0x00 PREC=0x00 TTL=116 ID=28931 DF PROTO=TCP
SPT=1726 DPT=22 WINDOW=17520 RES=0x00 ACK URGP=0
Oct 7 19:30:15 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=eth0 OUT= MAC=00:02:44:4e:33:7f:00:b0:64:8c:cb:
54:08:00 SRC=84.113.129.173 DST=217.76.164.189 LEN=133 TOS=0x00 PREC=0x00 TTL=116 ID=28933 PROTO=47
Oct 7 19:30:15 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=eth0 OUT= MAC=00:02:44:4e:33:7f:00:b0:64:8c:cb:
54:08:00 SRC=84.113.129.173 DST=217.76.164.189 LEN=133 TOS=0x00 PREC=0x00 TTL=116 ID=28947 PROTO=47
Oct 7 19:30:16 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=eth0 OUT= MAC=00:02:44:4e:33:7f:00:b0:64:8c:cb:
54:08:00 SRC=84.113.129.173 DST=217.76.164.189 LEN=133 TOS=0x00 PREC=0x00 TTL=116 ID=28985 PROTO=47
Oct 7 19:30:16 grisu kernel: SuSE-FW-ILLEGAL-TARGET IN=eth0 OUT= MAC=00:02:44:4e:33:7f:00:b0:64:8c:cb:
54:08:00 SRC=84.113.129.173 DST=217.76.164.189 LEN=133 TOS=0x00 PREC=0x00 TTL=116 ID=28987 PROTO=47
Oct 7 19:30:17 grisu pptpd[13684]: Buffering out-of-order packet; got 32 after 23
Oct 7 19:30:17 grisu pptpd[13684]: Packet reorder timeout waiting for 24
Oct 7 19:30:17 grisu pptpd[13684]: Buffering out-of-order packet; got 33 after 31
Oct 7 19:30:21 grisu SuSEfirewall2: Firewall rules successfully set from /etc/sysconfig/SuSEfirewall2
Oct 7 19:30:21 grisu pppd[13685]: Script /etc/ppp/ip-up finished (pid 13694), status = 0x0
Oct 7 19:30:23 grisu kernel: SuSE-FW-DROP-DEFAULT IN=ppp0 OUT=eth1 SRC=192.168.9.200 DST=192.168.1.2 L
EN=60 TOS=0x00 PREC=0x00 TTL=127 ID=29408 PROTO=ICMP TYPE=8 CODE=0 ID=1024 SEQ=256
Oct 7 19:30:29 grisu kernel: SuSE-FW-DROP-DEFAULT IN=ppp0 OUT=eth1 SRC=192.168.9.200 DST=192.168.1.2 L
EN=48 TOS=0x00 PREC=0x00 TTL=127 ID=29712 DF PROTO=TCP SPT=1734 DPT=21 WINDOW=16384 RES=0x00 SYN URGP=0
OPT (0204055001010402)
Oct 7 19:30:32 grisu kernel: SuSE-FW-DROP-DEFAULT IN=ppp0 OUT=eth1 SRC=192.168.9.200 DST=192.168.1.2 L
EN=48 TOS=0x00 PREC=0x00 TTL=127 ID=29871 DF PROTO=TCP SPT=1734 DPT=21 WINDOW=16384 RES=0x00 SYN URGP=0
OPT (0204055001010402)