[kwlug-disc] iptables logging/port confusion

[Paul Nijjar]

On Wed, May 20, 2009 at 04:15:47PM -0400, Richard Weait wrote:
> On Wed, 2009-05-20 at 10:30 -0400, Paul Nijjar wrote:
> > I think that this means that some machine on our network is connecting
> > to a port 6669 someplace else by opening port 59609 on our network.
> > The Rogers tech support suggests the opposite: that we are connecting
> > out (or being connected to) on port 6669 on our network. Who is right?
> 
> Can you see any of these connections happening live with >> status >>
> connections ?

No. The problem is too sporadic. Hence we are logging. I am trying to
log everything that goes out to the internet, but that is a LOT of
traffic. 

> Any unexpected ports open on >> firewall >> port forwarding ?

No. There are some ports open but I can account for them all. 

- Paul