Martian Source messages?

T

TomM

Verified User
Joined
Feb 13, 2006
Messages
21
I was curious to see if anybody has had experience with this type of message:

Oct 15 04:22:40 host kernel: martian source **.***.**.34(eth0) from **.***.**.38(static gateway), on dev eth1
Oct 15 04:22:40 host kernel: ll header: ff:ff:ff:ff:ff:ff:00:0f:cc:18:45:c0:08:06


NOTE: Ive added (eth0) and (static gateway)
I also get the same messages on eth1 aswell.


The server has eth0 and eth1 as static WAN IP's connected to a router which is configured for ip passthrough. The static ip of the gateway is the *.38, the brodcast is a *.39 and the subnet is a *.248

These martian source messages come up frequently and Im curious as to if anybody is familiar with these messages or possibly bad configuration.

Thank you for reading.
 
From what I remember it means that the packet was rejected because it came in on the external interface but is from a local IP. Sounds like you have some routing issues.
 
Yes, Im seeing that the martian source (from private Ip address range) is ment that some packets got rejected.

Ive went through the configuration of the nics, and the gateway and I cannot see any misconfigurations.

The firewall logs and the gateway logs do not reveil anything apparent.

Would anybody have any insight into possibly what type of misconfigurations might be done. Or if there are any other logs that might reveil any more info about these martian packets?

Thank you for the response.
 
Thanks for the reponse, Here is what I get from the route -n command:



Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
**.***.**.32 0.0.0.0 255.255.255.248 U 0 0 0 eth0
**.***.**.32 0.0.0.0 255.255.255.248 U 0 0 0 eth1
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth1
0.0.0.0 **.***.**.38 0.0.0.0 UG 0 0 0 eth0
 
You must log in or register to reply here.
Back
Top