From owner-freebsd-isp Mon Sep 25 6: 2:13 2000 Delivered-To: freebsd-isp@freebsd.org Received: from ns.internet.dk (ns.internet.dk [194.19.140.1]) by hub.freebsd.org (Postfix) with ESMTP id 8B8CD37B676 for ; Mon, 25 Sep 2000 05:45:19 -0700 (PDT) Received: (from uucp@localhost) by ns.internet.dk (8.9.3/8.9.3) with UUCP id OAA51578 for freebsd-isp@freebsd.org; Mon, 25 Sep 2000 14:45:18 +0200 (CEST) (envelope-from leifn@neland.dk) Received: from localhost (localhost [127.0.0.1]) by arnold.neland.dk (8.11.0/8.11.0) with ESMTP id e8PCiON33760 for ; Mon, 25 Sep 2000 14:44:25 +0200 (CEST) (envelope-from leifn@neland.dk) Date: Mon, 25 Sep 2000 14:44:23 +0200 (CEST) From: Leif Neland To: freebsd-isp@freebsd.org Subject: what is icmp src 8 dst 0? Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Last week I aired a problem where some hosts were unable to reach another in 80% of the time. It has now been determined that the almost unreachable server is behind a firewall, which doesn't like being sent icmp's with src port 8 to dst port 0, their consultant said. When it recieves such a packet, the firewall "hides itself" from all packets from that destination in 20 minutes. So the question is "what is icmp src 8 dst 0"? Is it a "legal" request? The source machines are running squid. Leif To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message