Difference between revisions of "Firewall Logs"
From Atomicorp Wiki
(Created page with "= DROP_ASL_GSCAN = ASL has detected a potential banner grab portscan. = DROP_ASL_CNSCAN = ASL has detected and blocked a connect() portscan. = DROP_ASL_SSCAN = ASL has de...") |
m |
||
Line 1: | Line 1: | ||
− | = | + | = Kernel firewall log headers = |
+ | == ASL_AR_DROP == | ||
+ | |||
+ | ASL has blocked packets from an IP that was automatically shunned by ASL. | ||
+ | |||
+ | |||
+ | |||
+ | == DROP_ASL_GSCAN == | ||
ASL has detected a potential banner grab portscan. | ASL has detected a potential banner grab portscan. | ||
− | = DROP_ASL_CNSCAN = | + | == DROP_ASL_CNSCAN == |
ASL has detected and blocked a connect() portscan. | ASL has detected and blocked a connect() portscan. | ||
− | = DROP_ASL_SSCAN = | + | == DROP_ASL_SSCAN == |
− | + | ||
ASL has detected and blocked a potential SYN portscan. | ASL has detected and blocked a potential SYN portscan. | ||
− | = DROP_ASL_STSCAN = | + | == DROP_ASL_STSCAN == |
ASL has detected and blocked a stealth portscan. | ASL has detected and blocked a stealth portscan. | ||
− | = DROP_ASL_RATE = | + | == DROP_ASL_RATE == |
The [[Ratelimit]] you configured for this port have been exceeded. ASL does not set any rate limits by default. | The [[Ratelimit]] you configured for this port have been exceeded. ASL does not set any rate limits by default. | ||
− | = DROP_ASL_MSS = | + | == DROP_ASL_MSS == |
ASL has detected a packet that is too small to be valid. | ASL has detected a packet that is too small to be valid. | ||
− | = DROP_ASL_INPUT = | + | == DROP_ASL_INPUT == |
− | + | ||
ASL has dropped a packet because you have configured it to do this. ASL does not block connections to any ports by default. | ASL has dropped a packet because you have configured it to do this. ASL does not block connections to any ports by default. |
Revision as of 17:02, 15 March 2014
Contents |
Kernel firewall log headers
ASL_AR_DROP
ASL has blocked packets from an IP that was automatically shunned by ASL.
DROP_ASL_GSCAN
ASL has detected a potential banner grab portscan.
DROP_ASL_CNSCAN
ASL has detected and blocked a connect() portscan.
DROP_ASL_SSCAN
ASL has detected and blocked a potential SYN portscan.
DROP_ASL_STSCAN
ASL has detected and blocked a stealth portscan.
DROP_ASL_RATE
The Ratelimit you configured for this port have been exceeded. ASL does not set any rate limits by default.
DROP_ASL_MSS
ASL has detected a packet that is too small to be valid.
DROP_ASL_INPUT
ASL has dropped a packet because you have configured it to do this. ASL does not block connections to any ports by default.