Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: shawnbishop on June 11, 2007, 05:36:40 PM

Title: rkhunter says eth0 in Promiscious Mode??
Post by: shawnbishop on June 11, 2007, 05:36:40 PM

Good Day

I decided to run rkhunter as it appears I am losing mail somwhere on the server, and I received this warning

[17:29:09] /sbin/syslogd clean (string: promiscuous)
[17:29:28] Checking network interfaces (promiscuous mode)... [ WARNING ]
[17:29:28] Possible promisc interfaces:
[17:29:28] Output test 2: eth0 in promiscuous mode
[17:29:28] Output test 2: tap0 in promiscuous mode


Why is eth0 in promisious mode, how do I switch it off??

Title: rkhunter says eth0 in Promiscious Mode??
Post by: Daniel B. on June 11, 2007, 05:46:02 PM

It seems that you are using openvpn in bridge mode. if it's the case, there's nothing to worry about, it's perfectly normal, the two interfaces eth0 and tap0 are enslaved in br0, br0 take the IP of eth0 and becomes the internal interface, then eth0 and tap0 are set in promiscuous mode.

Cheers, Daniel

Title: rkhunter says eth0 in Promiscious Mode??
Post by: shawnbishop on June 11, 2007, 05:51:57 PM

:?

Thankyou for your response, so no problem then???

Great

Title: rkhunter says eth0 in Promiscious Mode??
Post by: Daniel B. on June 11, 2007, 05:59:42 PM

No problem, I just don't know how to make rkhunter ignore this warning (I'm not sure if it's possible)