<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi,<br>
<br>
I've just noticed all these messages in my /var/log/secure:<br>
<br>
<small><font face="Courier New">May 31 02:05:18 server pluto[17050]:
packet from 76.104.163.12:500: ignoring Vendor ID payload
[MS-MamieExists]<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
af+type of ISAKMP Oakley attribute has an unknown value: 16384<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
May 31 02:05:18 server pluto[17050]: packet from 76.104.163.12:500:
sending notification PAYLOAD_MALFORMED to 76.104.163.12:500<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
af+type of ISAKMP Oakley attribute has an unknown value: 16384<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
May 31 02:05:20 server pluto[17050]: packet from 76.104.163.12:500:
sending notification PAYLOAD_MALFORMED to 76.104.163.12:500<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
sending notification PAYLOAD_MALFORMED to 76.104.163.12:500<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
May 31 02:05:27 server pluto[17050]: packet from 76.104.163.12:500:
af+type of ISAKMP Oakley attribute has an unknown value: 16384<br>
May 31 18:38:34 server pluto[17050]: packet from 194.35.72.164:500:
Informational Exchange is for an unknown (expired?) SA with
MSGID:0x7e6700fd<br>
May 31 18:38:44 server pluto[17050]: packet from 194.35.72.164:500:
Informational Exchange is for an unknown (expired?) SA with
MSGID:0x7ed0b6e2<br>
May 31 18:38:54 server pluto[17050]: packet from 194.35.72.164:500:
Informational Exchange is for an unknown (expired?) SA with
MSGID:0xc1623099<br>
May 31 18:39:04 server pluto[17050]: packet from 194.35.72.164:500:
Informational Exchange is for an unknown (expired?) SA with
MSGID:0x1889f8e4<br>
May 31 18:39:04 server pluto[17050]: packet from 194.35.72.164:500:
Informational Exchange is for an unknown (expired?) SA with
MSGID:0x9b710338<br>
Jun 3 01:39:48 server pluto[17050]: packet from 62.154.144.121:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 01:39:48 server pluto[17050]: packet from 62.154.144.121:500:
sending notification PAYLOAD_MALFORMED to 62.154.144.121:500<br>
Jun 3 01:39:49 server pluto[17050]: packet from 62.154.144.121:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 01:39:49 server pluto[17050]: packet from 62.154.144.121:500:
sending notification PAYLOAD_MALFORMED to 62.154.144.121:500<br>
Jun 3 01:39:52 server pluto[17050]: packet from 62.154.144.121:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 01:39:52 server pluto[17050]: packet from 62.154.144.121:500:
sending notification PAYLOAD_MALFORMED to 62.154.144.121:500<br>
Jun 3 01:39:56 server pluto[17050]: packet from 62.154.144.121:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 01:39:56 server pluto[17050]: packet from 62.154.144.121:500:
sending notification PAYLOAD_MALFORMED to 62.154.144.121:500<br>
Jun 3 02:16:08 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
Jun 3 02:16:08 server pluto[17050]: packet from 71.112.40.50:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 02:16:08 server pluto[17050]: packet from 71.112.40.50:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 02:16:08 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 02:16:08 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 02:16:08 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 02:16:08 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 02:16:08 server pluto[17050]: packet from 71.112.40.50:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 02:16:10 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
Jun 3 02:16:10 server pluto[17050]: packet from 71.112.40.50:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 02:16:10 server pluto[17050]: packet from 71.112.40.50:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 02:16:10 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 02:16:10 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 02:16:10 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 02:16:10 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 02:16:10 server pluto[17050]: packet from 71.112.40.50:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 02:16:13 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
Jun 3 02:16:13 server pluto[17050]: packet from 71.112.40.50:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 02:16:13 server pluto[17050]: packet from 71.112.40.50:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 02:16:13 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 02:16:13 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 02:16:13 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 02:16:13 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 02:16:13 server pluto[17050]: packet from 71.112.40.50:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 02:16:17 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
Jun 3 02:16:17 server pluto[17050]: packet from 71.112.40.50:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 02:16:17 server pluto[17050]: packet from 71.112.40.50:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 02:16:17 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 02:16:17 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 02:16:17 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 02:16:17 server pluto[17050]: packet from 71.112.40.50:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 02:16:17 server pluto[17050]: packet from 71.112.40.50:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
sending notification PAYLOAD_MALFORMED to 122.162.196.242:500<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 03:17:07 server pluto[17050]: packet from 122.162.196.242:500:
af+type of ISAKMP Oakley attribute has an unknown value: 16384<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
af+type of ISAKMP Oakley attribute has an unknown value: 16384<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 03:17:09 server pluto[17050]: packet from 122.162.196.242:500:
sending notification PAYLOAD_MALFORMED to 122.162.196.242:500<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
sending notification PAYLOAD_MALFORMED to 122.162.196.242:500<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 03:17:12 server pluto[17050]: packet from 122.162.196.242:500:
af+type of ISAKMP Oakley attribute has an unknown value: 16384<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
af+type of ISAKMP Oakley attribute has an unknown value: 16384<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 03:17:17 server pluto[17050]: packet from 122.162.196.242:500:
sending notification PAYLOAD_MALFORMED to 122.162.196.242:500<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
sending notification PAYLOAD_MALFORMED to 137.118.246.212:500<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000006]<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 14:52:35 server pluto[17050]: packet from 137.118.246.212:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000006]<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 14:52:39 server pluto[17050]: packet from 137.118.246.212:500:
sending notification PAYLOAD_MALFORMED to 137.118.246.212:500<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000006]<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 14:52:43 server pluto[17050]: packet from 137.118.246.212:500:
sending notification PAYLOAD_MALFORMED to 137.118.246.212:500<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000006]<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 14:52:51 server pluto[17050]: packet from 137.118.246.212:500:
sending notification PAYLOAD_MALFORMED to 137.118.246.212:500<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000006]<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 14:53:07 server pluto[17050]: packet from 137.118.246.212:500:
sending notification PAYLOAD_MALFORMED to 137.118.246.212:500<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-MamieExists]<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000006]<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [RFC 3947] meth=109, but port floating is off<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106,
but port floating is off<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [FRAGMENTATION]<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [MS-Negotiation Discovery Capable]<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [Vid-Initial-Contact]<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
ignoring Vendor ID payload [IKE CGA version 1]<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
initial Main Mode message received on 82.20.xxx.yyy:500 but no
connection has been authorized with policy=RSASIG<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 14:53:23 server pluto[17050]: packet from 137.118.246.212:500:
sending notification PAYLOAD_MALFORMED to 137.118.246.212:500<br>
Jun 3 14:53:40 server pluto[17050]: packet from 137.118.246.212:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 14:53:40 server pluto[17050]: packet from 137.118.246.212:500:
sending notification PAYLOAD_MALFORMED to 137.118.246.212:500<br>
Jun 3 14:54:28 server pluto[17050]: packet from 137.118.246.212:500:
next payload type of ISAKMP Message has an unknown value: 133<br>
Jun 3 14:54:28 server pluto[17050]: packet from 137.118.246.212:500:
sending notification PAYLOAD_MALFORMED to 137.118.246.212:500<br>
<br>
</font></small>Are they intrusion attempts by unknown parties?<br>
<br>
Regards,<br>
<br>
NIck<br>
</body>
</html>