|
|
|
| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
|
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now! |
|
#1
|
|||
|
|||
|
route -n
route -n
route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 113.161.234.37 - 255.255.255.255 !H 0 - 0 - 118.158.11.226 - 255.255.255.255 !H 0 - 0 - 66.77.73.155 - 255.255.255.255 !H 0 - 0 - 103.198.109.156 - 255.255.255.255 !H 0 - 0 - 103.108.33.101 - 255.255.255.255 !H 0 - 0 - 195.101.94.209 - 255.255.255.255 !H 0 - 0 - 66.77.73.58 - 255.255.255.255 !H 0 - 0 - 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo 0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth0 why I still the 7external IPs after I restart my machine? what are people doing? why I can't flush them route -flush
__________________
regards, wish to use AT 89c51 single chip computer to do remote sensing and send the data back from woods to office via nokie 3330 and internet. HOW? first I must revise C program thro' example, what's next? |
|
#2
|
|||
|
|||
|
Flushing those routes won't delete them if they're static routes you added. Try route del route address to delete them. Example, route del 113.161.234.37 will delete the route to that host.
|
|
#3
|
|||
|
|||
|
I have not add those hosts myself.
I donot know they have anything to do with DNS server. I changed my root password immediately. is my machine being hacked? [root@world news-post]# route del 103.161.234.37 SIOCDELRT: No such process why is that? [root@world news-post]# Last edited by pentium5 : October 7th, 2002 at 11:31 AM. |
|
#4
|
|||
|
|||
|
Those IP addresses seemed to be owned by either Qwest or ARIN.net so it may have something to do with DNS. I found this out by doing a WhoIs search on arin.net's website. I probably wouldn't worry about it.
|
|
#5
|
|||
|
|||
|
203.161.234.37 - 255.255.255.255 !H 0 - 0 -
208.158.11.226 - 255.255.255.255 !H 0 - 0 - cr016r01.sac2.f - 255.255.255.255 !H 0 - 0 - awork088156.net - 255.255.255.255 !H 0 - 0 - 203.108.33.101 - 255.255.255.255 !H 0 - 0 - x1crawler3-1-0. - 255.255.255.255 !H 0 - 0 - cr019r01-2.sac2 - 255.255.255.255 !H 0 - 0 - 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 127.0.0.0 * 255.0.0.0 U 0 0 0 lo default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0 my other machine, have only the last three lines.I am very serious about this. I am very cautious, please look again. Last edited by pentium5 : October 7th, 2002 at 12:04 PM. |
|
#6
|
|||
|
|||
|
What type of setup do you have? Is this connected directly to the Internet or is there a NAT/firewall between it and the public Internet? What services are running on this machine?
|
|
#7
|
|||
|
|||
|
linksys -nat
iptables httpd (externa) internal - all sorts of services. |
|
#8
|
|||
|
|||
|
I would do whois lookups on all of the addresses attached and find out if they maybe someone on your ISP's netblock and if they're trying to crack you. Maybe run Nessus on your machine to find out if you have anything vulnerable and find some rootkit detectors to run on the machine.
|
|
#9
|
|||
|
|||
|
cr016r01.sac2.f - 255.255.255.255 !H 0 - 0 -
awork088156.net - 255.255.255.255 !H 0 - 0 - x1crawler3-1-0. - 255.255.255.255 !H 0 - 0 - cr019r01-2.sac2 - 255.255.255.255 !H 0 - 0 - 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 127.0.0.0 * 255.0.0.0 U 0 0 0 lo default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0 how to delete the first four ? can u help? I can delete those with IP now? |
|
#10
|
|||
|
|||
|
if you really want to remove them then do (for example)
Code:
route del 203.161.234.37 reject The lines that you want to remove are blocking routes. Perhaps they are there for a reason. Read the route man page for more info before you delete them. jaa |
|
#11
|
|||
|
|||
|
I did that already and I remove those IP from rc.local.
It is my provious setup causing alarm. look fine to me. but I could not figure why there is not IP via 137 port attacking me. i have search goggle linksys port 137 ...etc. no much help. some said leave it. it is not like that before. very abnormal. ernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 127.0.0.0 * 255.0.0.0 U 0 0 0 lo default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0 |
![]() |
| Viewing: Dev Shed Forums > Operating Systems > Linux Help > route -n |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|