Shorewall users - Aug 2003 - newbie question - What exactly does this indicate ?

''allo,

    I saw the following in my logs and was wondering what exactly it
    means:

Aug 27 22:23:00 kirsun kernel: Shorewall:newnotsyn:DROP:IN=eth0
OUTMAC=08:00:07:a6:0f:c5:00:0b:bf:56:1c:70:08:00 SRC=62.149.140.15
DST=24.131.145.78 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP
SPT=80 DPT=1142 WINDOW=5840 RES=0x00 ACK SYN URGP=0

    I understand most of it, but what does the "newnotsyn" part
    indicate ? 


thanks,

    mehul

-- 
Mehul N. Sanghvi                  email: mehul@kirsun.com
Superior software is always free!   URL: http://kirsun.com/~mehul

I believe this might give you the answer that you are looking for.

http://www.faqs.org/docs/iptables/newnotsyn.html

On Thu, 2003-08-28 at 10:22, Mehul N. Sanghvi wrote:
> ''allo,
> 
>     I saw the following in my logs and was wondering what exactly it
>     means:
> 
> Aug 27 22:23:00 kirsun kernel: Shorewall:newnotsyn:DROP:IN=eth0 OUT>
MAC=08:00:07:a6:0f:c5:00:0b:bf:56:1c:70:08:00 SRC=62.149.140.15
> DST=24.131.145.78 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP
> SPT=80 DPT=1142 WINDOW=5840 RES=0x00 ACK SYN URGP=0
> 
>     I understand most of it, but what does the "newnotsyn" part
>     indicate ? 
> 
> 
> thanks,
> 
>     mehul

On Thu, 2003-08-28 at 08:22, Mehul N. Sanghvi wrote:
> ''allo,
> 
>     I saw the following in my logs and was wondering what exactly it
>     means:
> 
> Aug 27 22:23:00 kirsun kernel: Shorewall:newnotsyn:DROP:IN=eth0 OUT>
MAC=08:00:07:a6:0f:c5:00:0b:bf:56:1c:70:08:00 SRC=62.149.140.15
> DST=24.131.145.78 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=TCP
> SPT=80 DPT=1142 WINDOW=5840 RES=0x00 ACK SYN URGP=0
> 
>     I understand most of it, but what does the "newnotsyn" part
>     indicate ? 
FAQ #17 tells all.

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net