Re: FILTER problems
Arnaud Girsch (girsch@marben.com)
Thu, 14 Nov 1996 22:25:16 -0800 (PST)
> I have just started using filters due to the necessity of denying
> newsfeed access to selected customers. DENY LOG is set so I can see
> what is not making it through. The following is showing up quite a
> bit:
>
> Nov 14 13:25:16 pm2e10 11 deny: icmp from 205.160.97.159 to 199.227.0.17 type Time Exceeded for Datagram
> Nov 14 13:25:17 pm2e10 12 deny: icmp from 205.160.97.172 to 205.160.97.5 type Destination Unreachable
> Nov 14 13:25:27 pm2e10 11 deny: icmp from 205.160.97.159 to 199.227.0.17 type Time Exceeded for Datagram
> Nov 14 13:25:29 pm2e10 12 deny: icmp from 205.160.97.172 to 205.160.97.5 type Destination Unreachable
> Nov 14 13:25:39 pm2e10 11 deny: icmp from 205.160.97.159 to 199.227.0.17 type Time Exceeded for Datagram
> Nov 14 13:26:02 pm2e10 12 deny: icmp from 205.160.97.172 to 205.160.97.5 type Destination Unreachable
> Nov 14 13:26:34 pm2e10 12 deny: icmp from 205.160.97.172 to 205.160.97.5 type Destination Unreachable
> Nov 14 13:27:04 pm2e10 12 deny: icmp from 205.160.97.172 to 205.160.97.5 type Destination Unreachable
> Nov 14 13:27:23 pm2e10 12 deny: icmp from 205.160.97.169 to 204.127.160.1 type Destination Unreachable
> Nov 14 13:27:37 pm2e10 12 deny: icmp from 205.160.97.172 to 205.160.97.5 type Destination Unreachable
> Nov 14 13:28:08 pm2e10 12 deny: icmp from 205.160.97.172 to 205.160.97.5 type Destination Unreachable
>
> PM2E10 - self-explanatory, 205.160.97.5 - IP for pm2e10
> .159 .172 etc user IP addresses
>
I'd say someone (from 199.227.0.17) traceroute'd 205.160.97.159. Sending UDP
packets, and .159 answers with ICMP packets.
Nothing wrong with your filter, you just have to see if you want these
ICMP back to the net or not.
Arnaud.
--
Arnaud Girsch -+- agirsch@marben.com -+- Marben Products, Inc. - San Jose, CA