[Firehol-support] Re: incoming requests from dsl modem?

[Daniel Pittman]

On 13 Feb 2005, afe0108 at yahoo.com wrote:
> Hello, thanks for writing such an amazing program!  My
> firehol.conf is simply:

[...]

> Everything works and I can't see anything when I port scan from
> another host.

Nice, isn't it.

> I have 2 questions- the first is what does HOL in fireHOL mean?

I will leave that to the author;  I don't know myself. :)

> The second is that I have 2 incoming requests from the dsl modem
> every 30 secs or so and I'm not sure if they're important?
>
> Feb 12 22:01:24 hostname IN-world:IN=eth0 OUT= MAC=<snip>
> SRC=192.168.0.1 DST=68.127.240.107 LEN=92 TOS=0x00 PREC=0x00
> TTL=64 ID=36296 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=1

ICMP type 8 packets are part of the "ping" protocol - the "echo request"
part of it, specifically.

So, for whatever reason the cable modem is trying to ping 68.127.240.107
- presumably your machine - and the request is being dropped on the
floor.

Not really worrying, I think.

> Feb 12 22:01:40 hostname IN-world:IN=eth0 OUT= MAC=<snip>
> SRC=192.168.0.1 DST=68.127.240.107 LEN=576 TOS=0x00 PREC=0x00
> TTL=64 ID=36297 PROTO=UDP SPT=67 DPT=68 LEN=556

That is a part of the DHCP protocol.  Nothing to worry about at all.

     Daniel
-- 
Some television is so much chewing gum for the eyes.
        -- John Mason Brown