Ramasubramanian Ramesh wrote:
My bad, I googled icmp_type 8. It seems harmless and required to be implemented. So I am going to accept. After filtering out this one, I notice another one coming from my own firewall and need to figure out who is sending it.My mail tool some times refuses to bottom post, especially, when I reply to myself. I have to jump through hoops and some time it is easier to submit to its demands :-)top posting - iihh ugly ;-pwell, it's the netfilter code from the kernel instructed by an iptables rule, that spits out that message.most likely this is a message informing you about a blocked packet.the question is: who/what set this iptables rule to tell the kernel to discard such packets?my cristal ball is currently somehow foggy, so I can't tell. maybe you know what firewall frontend you are using? what to do?well - to prohibit logging of those packets in the short term a rule like this may do the job:iptables -I INPUT -i eth1 -s 192.168.1.1 -p icmp --icmp-type 8 -j DROP for the long term: learn how to configure your firewall frontend or iptables. but it's you modem/router right?so it might just check if you online. so it could be a 'good packet', which you might want to accept. - same thing as above just with the ACCEPT target.best regards MartAgreed. I set up the tables to drop and log messages whenever an unsolicited message comes from outside. But, I did not think I setup the router to send periodic pings. I guess the verizon router (yes, it is mine because verizon gave it to me free) does that because it is windows centric and it likes to by user friendly by inquiring "are you there? I greet you, etc."It may be a good packet or it may be a bad packet. I still do not want to look at unsolicited packets. I am worried that some one from outside can spoof as my router. I will just drop this specific packet without logging it.Specifically, what does icmp_type = 8 mean? Ramesh
[2731831.967429] IN=eth1 OUT= MAC= SRC=192.168.1.47 DST=192.168.1.255 LEN=233 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=138 DPT=138 LEN=213
I think this from my nmbd on the outgoing port. I am going to investigate interfaces option in smb.conf. Please tell me if I am on the wrong path.
Ramesh