Have you compiled your Squid with --enable-icmp?
Are you sure this is ICMP ECHO packets, and not any of the normal ICMP
types needed for proper TCP/IP operation and part of normal TCP/IP use?
(not sure how to read that packet log entry to find the interesting
pieces to tell what kind of ICMP packet it was..)
-- Henrik Nordstrom Squid hacker David Wilson wrote: > > Hi guys, > > A quick question, why do our bind 8 DNS ping servers continously try and > ping our clients and visa versa ? > > #Sample# > Feb 15 12:26:30 firewall kernel: Packet log: output DENY ppp0 PROTO=1 > 10.0.0.1:3 10.0.0.2:3 L=404 S=0xC0 I=44615 > F=0x0000 T=255 (#16) > #/Sample# > > I know that Squid seems to do this too sometimes ? > Is there a way to disable this, because my firewall logs get kinda large ! > ;-) > Any help would be appreciated, thanks. > > Kindest regards > David Wilson > The S.A Internet > > --------------------------------------------------------------- > > Name: winmail.dat > Part 1.2 Type: application/ms-tnef > Encoding: base64 -- To unsubscribe, see http://www.squid-cache.org/mailing-lists.htmlReceived on Thu Feb 15 2001 - 15:34:09 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:01 MST