SFW2-INext-DROP-DEFLT in dmesg

**Xilanaz** · 06-Nov-2008, 10:08

I changed routers today which is nothing spectaculair and I have so far no real connection problems however dmesg is slowly filling up with:

SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC=01:00:5e:00:00:fb:00:21:00:45:88:50:08:00 SRC=192.168.0.100 DST=224.0.0.251 LEN=64 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP SPT=5353 DPT=5353 LEN=44

the only thing that really changed is the IP adres, from eth0: offered 192.168.123.179 from 192.168.123.254 to eth0: offered 192.168.0.101 from 192.168.0.1

funny part is that SRC=192.168.0.100 is a laptop (also suse 11) on the router.

thanks for any insights

Xil

**Xilanaz** · 06-Nov-2008, 10:40

ignore: "funny part is that SRC=192.168.0.100 is a laptop (also suse 11) on the router." I got 2 log entries mixed up

**Xilanaz** · 06-Nov-2008, 10:57

I stopped avahi daemon and dnsconfd and that stopped the message. Can anyone explain what thise 2 are exactly for ? I asume the new router blocks them causing the messages

**malcolmlewis** · 06-Nov-2008, 11:05

Originally Posted by Xilanaz

I changed routers today which is nothing spectaculair and I have so far
no real connection problems however dmesg is slowly filling up with:

SFW2-INext-DROP-DEFLT IN=eth0 OUT=
MAC=01:00:5e:00:00:fb:00:21:00:45:88:50:08:00 SRC=192.168.0.100
DST=224.0.0.251 LEN=64 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP
SPT=5353 DPT=5353 LEN=44

the only thing that really changed is the IP adres, from eth0: offered
192.168.123.179 from 192.168.123.254 to eth0: offered 192.168.0.101 from
192.168.0.1

funny part is that SRC=192.168.0.100 is a laptop (also suse 11) on the
router.

thanks for any insights

Xil

Hi
That's Multicast DNS, if you don't need it, disable it edit
your /etc/host.conf and set mdns off

--
Cheers Malcolm �� (Linux Counter #276890)
openSUSE 11.0 x86 Kernel 2.6.25.18-0.2-default
up 1 day 16:15, 2 users, load average: 0.00, 0.02, 0.03
GPU GeForce 6600 TE/6200 TE - Driver Version: 177.80

**Xilanaz** · 07-Nov-2008, 05:10

thank you.

**swerdna** · 05-Nov-2011, 15:25

Originally Posted by malcolmlewis

Hi
That's Multicast DNS, if you don't need it, disable it edit
your /etc/host.conf and set mdns off

--
Cheers Malcolm �� (Linux Counter #276890)
openSUSE 11.0 x86 Kernel 2.6.25.18-0.2-default
up 1 day 16:15, 2 users, load average: 0.00, 0.02, 0.03
GPU GeForce 6600 TE/6200 TE - Driver Version: 177.80

I've got thousands of that now Malcolm. Nowadays, would the setting be to set "multi off"?

**malcolmlewis** · 05-Nov-2011, 17:52

Hi
AFAIK it should be the same entry to add at the end of the file.

**swerdna** · 07-Nov-2011, 04:44

Originally Posted by malcolmlewis

Hi
AFAIK it should be the same entry to add at the end of the file.

LOL: I made the entry and then ran the command rcnetwork restart then route, just to see what I might see. The "route" command terminal delivered the message that I should take the entry out of host.conf because (it said) that setting is now in nsswitch.conf. There is a very thoughtful developer behind that message.