From owner-freebsd-stable@FreeBSD.ORG Tue Sep 11 09:11:29 2012 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 178521065672 for ; Tue, 11 Sep 2012 09:11:29 +0000 (UTC) (envelope-from prabhpal@digital-infotech.net) Received: from mail.digital-infotech.net (mail.digital-infotech.net [41.211.25.193]) by mx1.freebsd.org (Postfix) with ESMTP id AA3D98FC17 for ; Tue, 11 Sep 2012 09:11:28 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.digital-infotech.net (Postfix) with ESMTP id A8C732E41B8 for ; Tue, 11 Sep 2012 09:11:26 +0000 (GMT) Received: from mail.digital-infotech.net ([127.0.0.1]) by localhost (mail.digital-infotech.net [127.0.0.1]) (maiad, port 10024) with ESMTP id 50585-04 for ; Tue, 11 Sep 2012 09:11:26 +0000 (GMT) Received: from Prabhpals-MacBook-Pro.local (Prabhpals-MacBook-Pro.local [41.211.27.79]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: prabhpal@digital-infotech.net) by mail.digital-infotech.net (Postfix) with ESMTPSA id 8FD362E41B7 for ; Tue, 11 Sep 2012 09:11:26 +0000 (GMT) X-DKIM: OpenDKIM Filter v2.5.0 mail.digital-infotech.net 8FD362E41B7 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digital-infotech.net; s=digital; t=1347354686; bh=8wI6jOYT+5TAg1zc4x4YTnGV4wjfh6xk0mzOWJBbc00=; h=Date:From:To:Subject:References:In-Reply-To; b=aIuCxfvxva7ByUkMVys1DOFc2ZvjAR3Sb8qCfuTKPx0ZMlBy1/msU5hmsnsaW5ei6 DT2QG9MMq79RxXwSpKSnE2yOdSjX1vT99tytHVKHd8wnuYdV4smoYHCmexDQbGgtGd LdU8ly3OTZaFAELw+JOh88XnGvJyovd+RC2kPyvM= Message-ID: <504F003E.2000508@digital-infotech.net> Date: Tue, 11 Sep 2012 09:11:26 +0000 From: "Shiv. Nath" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:15.0) Gecko/20120824 Thunderbird/15.0 MIME-Version: 1.0 To: freebsd-stable@freebsd.org References: <504EF33A.7080304@digital-infotech.net> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: PF Configuration - FreeBSD Release 9.0 x64 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Sep 2012 09:11:29 -0000 Sep 11 07:49:56 titan avahi-daemon[1567]: Received response from host 41.211.2.239 with invalid source port 4331 on interface 'em0.0' Sep 11 07:50:25 titan avahi-daemon[1567]: Received response from host 41.211.2.239 with invalid source port 38627 on interface 'em0.0' Sep 11 07:51:29 titan avahi-daemon[1567]: Received response from host 41.211.2.239 with invalid source port 38627 on interface 'em0.0' _______________________________________________ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > > It says it received a *response* so my understanding is *you* are trying to connect. > > Adjust your rule and see if it's any better._______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > Dear D. Fleuriot & Christer. S Thanks for your response and help, logically, you are correct (It says it received a *response* so my understanding is *you* are trying to connect) but frankly speaking, i don't know what is happening. i have 5,000 active public IP address configured in my network. The problematic IP belongs to one of my customer "41.211.2.239". i see the same log in many other server as well. i am bit confuse because how 10 servers from my data center has decided to send something to same particular IP whereas there are many thousand other ip available to send something. it is like that machine is sending broadcast and my servers receive it, but it confuse when reading logs. have you come across this kind of issue before? Thanks for your assistance, i will try to block using block log quick ... instead, or i will put this IP to VLAN to stop broadcasting.