13 Oct
2000
13 Oct
'00
07:07
these are icmp packets, "destination-unreachable". you probably have a policy on the output chain of DENY and don't let the icmp packets pass. you should NEVER NEVER NEVER block "destination-unreachable", and the following should also stay open: ipchains -A output -p icmp --icmp-type destination-unreachable -j ACCEPT ipchains -A output -p icmp --icmp-type source-quench -j ACCEPT ipchains -A output -p icmp --icmp-type time-exceeded -j ACCEPT ipchains -A output -p icmp --icmp-type parameter-problem -j ACCEPT ipchains -A output -p icmp --icmp-type echo-request -j ACCEPT and repeat that all for the input chain. martin madduck@madduck.net (greetings from the heart of the sun)