Linux Help
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsOperating SystemsLinux Help

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now!
  #1  
Old October 7th, 2002, 11:08 AM
pentium5 pentium5 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2001
Location: entlegen
Posts: 442 pentium5 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 7
route -n

route -n
route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
113.161.234.37 - 255.255.255.255 !H 0 - 0 -
118.158.11.226 - 255.255.255.255 !H 0 - 0 -
66.77.73.155 - 255.255.255.255 !H 0 - 0 -
103.198.109.156 - 255.255.255.255 !H 0 - 0 -
103.108.33.101 - 255.255.255.255 !H 0 - 0 -
195.101.94.209 - 255.255.255.255 !H 0 - 0 -
66.77.73.58 - 255.255.255.255 !H 0 - 0 -
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth0


why I still the 7external IPs after I restart my machine? what are people doing?

why I can't flush them


route -flush
__________________
regards,

wish to use AT 89c51 single chip computer to do remote sensing and send the data back from woods to office via nokie 3330 and internet. HOW?
first I must revise C program thro' example, what's next?

Reply With Quote
  #2  
Old October 7th, 2002, 11:14 AM
damonbrinkley damonbrinkley is offline
Modz
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2002
Location: NC, USA
Posts: 364 damonbrinkley User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 m 18 sec
Reputation Power: 6
Send a message via AIM to damonbrinkley
Flushing those routes won't delete them if they're static routes you added. Try route del route address to delete them. Example, route del 113.161.234.37 will delete the route to that host.

Reply With Quote
  #3  
Old October 7th, 2002, 11:24 AM
pentium5 pentium5 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2001
Location: entlegen
Posts: 442 pentium5 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 7
I have not add those hosts myself.


I donot know they have anything to do with DNS server.

I changed my root password immediately. is my machine being hacked?


[root@world news-post]# route del 103.161.234.37
SIOCDELRT: No such process

why is that?
[root@world news-post]#

Last edited by pentium5 : October 7th, 2002 at 11:31 AM.

Reply With Quote
  #4  
Old October 7th, 2002, 11:46 AM
damonbrinkley damonbrinkley is offline
Modz
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2002
Location: NC, USA
Posts: 364 damonbrinkley User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 m 18 sec
Reputation Power: 6
Send a message via AIM to damonbrinkley
Those IP addresses seemed to be owned by either Qwest or ARIN.net so it may have something to do with DNS. I found this out by doing a WhoIs search on arin.net's website. I probably wouldn't worry about it.

Reply With Quote
  #5  
Old October 7th, 2002, 11:54 AM
pentium5 pentium5 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2001
Location: entlegen
Posts: 442 pentium5 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 7
203.161.234.37 - 255.255.255.255 !H 0 - 0 -
208.158.11.226 - 255.255.255.255 !H 0 - 0 -
cr016r01.sac2.f - 255.255.255.255 !H 0 - 0 -
awork088156.net - 255.255.255.255 !H 0 - 0 -
203.108.33.101 - 255.255.255.255 !H 0 - 0 -
x1crawler3-1-0. - 255.255.255.255 !H 0 - 0 -
cr019r01-2.sac2 - 255.255.255.255 !H 0 - 0 -
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0

my other machine, have only the last three lines.I am very serious about this.


I am very cautious, please look again.

Last edited by pentium5 : October 7th, 2002 at 12:04 PM.

Reply With Quote
  #6  
Old October 7th, 2002, 12:05 PM
damonbrinkley damonbrinkley is offline
Modz
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2002
Location: NC, USA
Posts: 364 damonbrinkley User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 m 18 sec
Reputation Power: 6
Send a message via AIM to damonbrinkley
What type of setup do you have? Is this connected directly to the Internet or is there a NAT/firewall between it and the public Internet? What services are running on this machine?

Reply With Quote
  #7  
Old October 7th, 2002, 12:08 PM
pentium5 pentium5 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2001
Location: entlegen
Posts: 442 pentium5 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 7
linksys -nat


iptables

httpd (externa)

internal - all sorts of services.

Reply With Quote
  #8  
Old October 7th, 2002, 12:18 PM
damonbrinkley damonbrinkley is offline
Modz
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2002
Location: NC, USA
Posts: 364 damonbrinkley User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 m 18 sec
Reputation Power: 6
Send a message via AIM to damonbrinkley
I would do whois lookups on all of the addresses attached and find out if they maybe someone on your ISP's netblock and if they're trying to crack you. Maybe run Nessus on your machine to find out if you have anything vulnerable and find some rootkit detectors to run on the machine.

Reply With Quote
  #9  
Old October 7th, 2002, 07:16 PM
pentium5 pentium5 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2001
Location: entlegen
Posts: 442 pentium5 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 7
cr016r01.sac2.f - 255.255.255.255 !H 0 - 0 -
awork088156.net - 255.255.255.255 !H 0 - 0 -
x1crawler3-1-0. - 255.255.255.255 !H 0 - 0 -
cr019r01-2.sac2 - 255.255.255.255 !H 0 - 0 -
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0


how to delete the first four ? can u help?

I can delete those with IP now?

Reply With Quote
  #10  
Old October 7th, 2002, 10:02 PM
justice41 justice41 is offline
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2002
Location: The Emerald City
Posts: 289 justice41 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 7
if you really want to remove them then do (for example)
Code:
route del 203.161.234.37 reject

The lines that you want to remove are blocking routes. Perhaps they are there for a reason. Read the route man page for more info before you delete them.

jaa

Reply With Quote
  #11  
Old October 7th, 2002, 10:35 PM
pentium5 pentium5 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2001
Location: entlegen
Posts: 442 pentium5 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 7
I did that already and I remove those IP from rc.local.

It is my provious setup causing alarm. look fine to me.

but I could not figure why there is not IP via 137 port attacking me.

i have search goggle linksys port 137 ...etc. no much help. some said leave it.
it is not like that before. very abnormal.

ernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 192.168.1.1 0.0.0.0 UG 0 0 0 eth0

Reply With Quote
Reply

Viewing: Dev Shed ForumsOperating SystemsLinux Help > route -n


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 1 hosted by Hostway