[Firehol-support] Too many log messages

[Rick Marshall]

slightly off topic, but does this mean one could use the microsoft 
personal firewall on a pc to block these licence probes and thus defeat 
their somewhat simplistic anti-piracy scheme? i presume it would be even 
easier on a mac.

we all suffer similar overload from windows pc's connecting directly to 
the internet on the same c class subnet as our servers and then suffer a 
constant bombardment of windows network probes (port 445 etc). this 
microsoft stuff is very noisy.

rick

Costa Tsaousis wrote:

> Richard Williams wrote:
>
>> Hi
>>
>>  
>>
>> The users on the network I operate have Macintosh computers with one 
>> of the applications being Microsoft Office 2004.  This constantly 
>> pumps out packets on UDP 2222 and the packets contain details of the 
>> license code in use.  Then if any other Macintosh running Office 2004 
>> picks a packet with its license code, Office 2004 is closed down on 
>> the second computer.  All this is to do with Microsoft stopping 
>> illegal pirating and copying of its software.
>>
>>  
>>
>> However, the consequence for the server with Firehol running is that 
>> the log is quickly filling up with messages like
>>
>>  
>>
>> Nov 11 09:40:33 server kernel: IN-dhcp:IN=eth0 OUT= 
>> MAC=ff:ff:ff:ff:ff:ff:00:0d:93:b8:60:f8:08:00 SRC=10.6.18.36 
>> DST=255.255.255.255 LEN=180 TOS=0x00 PREC=0x00 TTL=64 ID=46083 
>> PROTO=UDP SPT=60344 DPT=2222 LEN=160
>>
>>  
>>
>> Does anyone have any ideas how I can stop these messages getting into 
>> the log?
>>
>
> Define this that the top of firehol.conf:
>
> server_office_ports="udp/2222"
> client_office_ports="any"
>
>
> In your dhcp interface, add this line:
>
> server office drop
>
>
>
> Costa
>
>
>
> -------------------------------------------------------
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. 
> Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> _______________________________________________
> Firehol-support mailing list
> Firehol-support at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/firehol-support
>
> !DSPAM:4375234941992077046306!
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: rjm.vcf
Type: text/x-vcard
Size: 146 bytes
Desc: not available
URL: <http://lists.firehol.org/pipermail/firehol-support/attachments/20051112/014067e8/attachment-0003.vcf>