Hi Togan, icmp type 3 is destination unreachable. You should not block these packets coming from inet to you (re-read ipchains howto). It seems your 10.14.9.254 cannot reach a host in the internet. HTH Philipp
-----Ursprungliche Nachricht----- Von: Togan Muftuoglu [mailto:toganm@users.sourceforge.net] Gesendet: Mittwoch, 15. August 2001 15:53 An: Suse-Security Betreff: [suse-security] icmp requests from 10.0.0.0 network to ppp0
I have been receiving these requests which are stopped with _DENY_ rule at the firewall.
Now I have adsl connection which is using rp_pppoe and I thought private ip's should not be allowed thru the external interface.
I believe this is coming from my isp but is this normal or what
Aug 15 16:16:02 gardiyan kernel: Packet log: input DENY ppp0 PROTO=1 10.14.9.254:3 212.156.197.144:1 L=56 S=0x00 I=1640 F=0x0000 T=254 (#4) Aug 15 16:16:59 gardiyan last message repeated 2 times Aug 15 16:20:05 gardiyan kernel: Packet log: input DENY ppp0 PROTO=1 10.14.9.254:3 212.156.197.144:1 L=56 S=0x00 I=63495 F=0x0000 T=254 (#4) Aug 15 16:26:05 gardiyan kernel: Packet log: input DENY ppp0 PROTO=1 10.14.9.254:3 212.156.197.144:1 L=56 S=0x00 I=63495 F=0x0000 T=254 (#4) Aug 15 16:28:05 gardiyan kernel: Packet log: input DENY ppp0 PROTO=1 10.14.9.254:3 212.156.197.144:1 L=56 S=0x00 I=63495 F=0x0000 T=254 (#4) Aug 15 16:30:05 gardiyan kernel: Packet log: input DENY ppp0 PROTO=1 10.14.9.254:3 212.156.197.144:1 L=56 S=0x00 I=15693 F=0x0000 T=254 (#4) Aug 15 16:32:05 gardiyan kernel: Packet log: input DENY ppp0 PROTO=1 10.14.9.254:3 212.156.197.144:1 L=56 S=0x00 I=15693 F=0x0000 T=254 (#4) Aug 15 16:38:05 gardiyan kernel: Packet log: input DENY ppp0 PROTO=1 10.14.9.254:3 212.156.197.144:1 L=56 S=0x00 I=40482 F=0x0000 T=254 (#4)
-- Togan Muftuoglu
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com