Date: Tue, 26 Sep 2000 00:09:57 +1100 (EST) From: Rowan Crowe <rowan@sensation.net.au> To: freebsd-isp@freebsd.org Subject: Re: what is icmp src 8 dst 0? Message-ID: <Pine.BSF.4.21.0009260004430.31933-100000@velvet.sensation.net.au> In-Reply-To: <Pine.BSF.4.21.0009251437350.31545-100000@arnold.neland.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 25 Sep 2000, Leif Neland wrote: > Last week I aired a problem where some hosts were unable to reach another > in 80% of the time. > > It has now been determined that the almost unreachable server is behind a > firewall, which doesn't like being sent icmp's with src port 8 to dst port > 0, their consultant said. When it recieves such a packet, the firewall > "hides itself" from all packets from that destination in 20 minutes. > > So the question is "what is icmp src 8 dst 0"? He probably means ICMP type 8 code 0, which is an echo request (ping). ICMP does not have a concept of port numbers. An ICMP echo request is pretty harmless, so it must be a real paranoid firewall... > Is it a "legal" request? > > The source machines are running squid. Have a look in squid.conf for "ping", "pinger" and "icmp", that may give you some clues... from a quick look, it's something to do with measuring the number of hops and network latency to a host (parent/sibling?) which is used in the selection of who to fetch from. It doesn't appear to be on by default, so it's been specifically compiled in by someone. Cheers. -- Rowan Crowe http://www.rowan.sensation.net.au/ Sensation Internet Services http://info.sensation.net.au/ Melbourne, Australia Phone: +61-3-9388-9260 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0009260004430.31933-100000>