Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Sep 2012 09:11:26 +0000
From:      "Shiv. Nath" <prabhpal@digital-infotech.net>
To:        freebsd-stable@freebsd.org
Subject:   Re: PF Configuration - FreeBSD Release 9.0 x64
Message-ID:  <504F003E.2000508@digital-infotech.net>
In-Reply-To: <A41AC173-339A-49DB-9AAB-5079D6B1001C@my.gd>
References:  <504EF33A.7080304@digital-infotech.net> <A41AC173-339A-49DB-9AAB-5079D6B1001C@my.gd>

next in thread | previous in thread | raw e-mail | index | archive | help
Sep 11 07:49:56 titan avahi-daemon[1567]: Received response from host 
41.211.2.239 with invalid source port 4331 on interface 'em0.0'
Sep 11 07:50:25 titan avahi-daemon[1567]: Received response from host 
41.211.2.239 with invalid source port 38627 on interface 'em0.0'
Sep 11 07:51:29 titan avahi-daemon[1567]: Received response from host 
41.211.2.239 with invalid source port 38627 on interface 'em0.0' 
_______________________________________________ freebsd-stable@freebsd.org
mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To 
unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
>
> It says it received a *response* so my understanding is *you* are trying to connect.
>
> Adjust your rule and see if it's any better._______________________________________________
> freebsd-stable@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
>
Dear D. Fleuriot & Christer. S

Thanks for your response and help, logically, you are correct (It says 
it received a *response* so my understanding is *you* are trying to 
connect) but frankly speaking, i don't know what is happening.

i have 5,000 active public IP address configured in my network. The 
problematic IP belongs to one of my customer "41.211.2.239". i see the 
same log in many other server as well. i am bit confuse because how 10 
servers from my data center has decided to send something to same 
particular IP whereas there are many thousand other ip available to send 
something. it is like that machine is sending broadcast and my servers 
receive it, but it confuse when reading logs. have you come across this 
kind of issue before?

Thanks for your assistance, i will try to block using

block log quick ... instead, or i will put this IP to VLAN to stop broadcasting.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?504F003E.2000508>