[Firehol-support] incoming requests from dsl modem?

[Costa Tsaousis]

Hi,

> I have 2 questions- the first is what does HOL in fireHOL mean?

It means Hellas On Line. It is the company I work for. I originally wrote
FireHOL as a firewall configuration tool for my system engineers.

> The second is that I have 2 incoming requests from the dsl modem
> every 30 secs or so and I'm not sure if they're important?
>
> Feb 12 22:01:24 hostname IN-world:IN=eth0 OUT= MAC=<snip>
> SRC=192.168.0.1 DST=68.127.240.107 LEN=92 TOS=0x00 PREC=0x00
> TTL=64 ID=36296 PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=1

This is an ICMP Echo Request (normally a request for ping), sent from
192.168.0.1 to 68.127.240.107.

> Feb 12 22:01:40 hostname IN-world:IN=eth0 OUT= MAC=<snip>
> SRC=192.168.0.1 DST=68.127.240.107 LEN=576 TOS=0x00 PREC=0x00
> TTL=64 ID=36297 PROTO=UDP SPT=67 DPT=68 LEN=556

This is a DHCP Reply (client 192.168.0.1 to server 68.127.240.107).

> I say it's my dsl modem because when I open 192.168.0.1 in a web
> browser it's the config page for the modem.

I guess you have a DSL router, not modem. This router is trying to reach
the host 68.127.240.107 via your linux. If you use this device as a router
and the IP 68.127.240.107 is not yours, I would say that it has a wrong
routing table.

Costa