RE: [SQU] Bind pinging ?

From: David Wilson <davew@dont-contact.us>
Date: Sat, 17 Feb 2001 09:20:07 +0200

True, but damn it's irritating in my Linux ipchains firewall logs ;-)
Thanks for the guidance anyways.

-----Original Message-----
From: hno@hem.passagen.se [mailto:hno@hem.passagen.se]
Sent: 16 February 2001 10:41
To: David Wilson
Subject: Re: [SQU] Bind pinging ?

Which is quite normal to see in normal TCP/IP operation as ICMP is used
for a number of different things far more important than ping.

--
Henrik Nordstrom
Squid hacker
David Wilson wrote:
>
> Hi Henrik,
>
> No I didn't compile with --enable-icmp.
> PROTO=1 =icmp
> That's about all I can see. ;-)
>
> -----Original Message-----
> From: hno@hem.passagen.se [mailto:hno@hem.passagen.se]
> Sent: 16 February 2001 12:16
> To: David Wilson
> Cc: FreeBSD Mailing List; squid-users@ircache.net
> Subject: Re: [SQU] Bind pinging ?
>
> Have you compiled your Squid with --enable-icmp?
>
> Are you sure this is ICMP ECHO packets, and not any of the normal ICMP
> types needed for proper TCP/IP operation and part of normal TCP/IP use?
>
> (not sure how to read that packet log entry to find the interesting
> pieces to tell what kind of ICMP packet it was..)
>
> --
> Henrik Nordstrom
> Squid hacker
>
> David Wilson wrote:
> >
> > Hi guys,
> >
> > A quick question, why do our bind 8 DNS ping servers continously try and
> > ping our clients and visa versa ?
> >
> > #Sample#
> > Feb 15 12:26:30 firewall kernel: Packet log: output DENY ppp0 PROTO=1
> > 10.0.0.1:3 10.0.0.2:3 L=404 S=0xC0 I=44615
> >  F=0x0000 T=255 (#16)
> > #/Sample#
> >
> > I know that Squid seems to do this too sometimes ?
> > Is there a way to disable this, because my firewall logs get kinda large
!
> > ;-)
> > Any help would be appreciated, thanks.
> >
> > Kindest regards
> > David Wilson
> > The S.A Internet
> >
> >     ---------------------------------------------------------------
> >
> >                                Name: winmail.dat
> >                 Part 1.2       Type: application/ms-tnef
> >                            Encoding: base64
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Sat Feb 17 2001 - 00:23:40 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:02 MST