New Zealand ADSL Mailing List


RE: icmp pinholes

From: rob.edkins_at_axon.co.nz
Date: Tue, 5 Dec 2000 14:50:15 +1300
Message-ID: <42CCA0F98530D111A77900805F0D52B3024B668D@AX-AKL-EXCHANGE>

I gather the M1122 has some protocol proxies.

You might want to telnet the box as admin and have a browse to see if
there's something you can turn off.

Rob

Dan Langille wrote:
>
> Here's what I'm trying now:
>
> start 0, end 0, number of ports 1, protocol 1
>
> yet I do this: # tcpdump -i ed0 icmp
>
> and the only pings which turn up are those I initiate:
>
> ping -c 1 www.actrix.gen.nz
>
> gives:
>
> # tcpdump -i ed0 icmp
> tcpdump: listening on ed0
> 14:44:03.501380 ducky.nz.freebsd.org > www.actrix.gen.nz: icmp: echo
> request
> 14:44:03.562480 www.actrix.gen.nz > ducky.nz.freebsd.org: icmp: echo
> reply
>
> Hmmm. So pings out are OK. Pings in don't get to the
> firewall. They
> appear to be stopped at the router.
>
> I guess my first question should be: who has pings hitting
> their firewall
> inside an M1122?

This message is part of the NZ ADSL mailing list.
see http://unixathome.org/adsl/ for archives, FAQ,
and various documents.
To unsubscribe: send mail to majordomo@unixathome.org
with "unsubscribe adsl" in the body of the message
Received on Tue Dec 5 14:51:08 2000


This archive was generated by hypermail 2.2.0 : Thu Nov 30 11:48:07 2006 EST