Re: [SQU] Bind pinging ?

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 15 Feb 2001 23:15:35 +0100

Have you compiled your Squid with --enable-icmp?

Are you sure this is ICMP ECHO packets, and not any of the normal ICMP
types needed for proper TCP/IP operation and part of normal TCP/IP use?

(not sure how to read that packet log entry to find the interesting
pieces to tell what kind of ICMP packet it was..)

--
Henrik Nordstrom
Squid hacker
David Wilson wrote:
> 
> Hi guys,
> 
> A quick question, why do our bind 8 DNS ping servers continously try and
> ping our clients and visa versa ?
> 
> #Sample#
> Feb 15 12:26:30 firewall kernel: Packet log: output DENY ppp0 PROTO=1
> 10.0.0.1:3 10.0.0.2:3 L=404 S=0xC0 I=44615
>  F=0x0000 T=255 (#16)
> #/Sample#
> 
> I know that Squid seems to do this too sometimes ?
> Is there a way to disable this, because my firewall logs get kinda large !
> ;-)
> Any help would be appreciated, thanks.
> 
> Kindest regards
> David Wilson
> The S.A Internet
> 
>     ---------------------------------------------------------------
> 
>                                Name: winmail.dat
>                 Part 1.2       Type: application/ms-tnef
>                            Encoding: base64
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Thu Feb 15 2001 - 15:34:09 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:01 MST