From owner-freebsd-questions Tue Jul 10 11:52:26 2001 Delivered-To: freebsd-questions@freebsd.org Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by hub.freebsd.org (Postfix) with ESMTP id D2CAB37B40C for ; Tue, 10 Jul 2001 11:52:14 -0700 (PDT) (envelope-from fgleiser@cactus.fi.uba.ar) Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by cactus.fi.uba.ar (8.11.3/8.9.3) with ESMTP id f6AIo6684944; Tue, 10 Jul 2001 15:50:11 -0300 (ART) (envelope-from fgleiser@cactus.fi.uba.ar) Date: Tue, 10 Jul 2001 15:50:06 -0300 (ART) From: Fernando Gleiser To: Arcady Genkin Cc: Subject: Re: IPF questions In-Reply-To: Message-ID: <20010710153541.T80992-100000@cactus.fi.uba.ar> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 10 Jul 2001, Arcady Genkin wrote: > > > Michael, thanks for your reply. > > So, do I want to be blocking those packets? I ges I do, since > 224.0.0.1 has nothing to do with my IP address. Those are reserved class D multicast adresses. In particular, 224.0.0.1 is called the all-hosts group address. If you don't need multicasting, add a "block in quick proto igmp all", and a "block in quick from 224.0.0.0/8 to any" to the top of your ruleset > > I wonder how those packets find their way to me, anyways... I've A probable cause is a broken or misconfigured router. The source addrees is within the netblock of your ISP. > dropped close to a thousand in ten hours. My external subnet is > 24.42.106.0/24. > -- > Arcady Genkin > i=1; while 1, hilb(i); i=i+1; end > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message