Re: Feisty and ping





spacemarc wrote:
2007/6/15, Tony Arnold <tony.arnold@xxxxxxxxxxxxxxxx>:
Try disabling ICMP filtering and see if that fixes the problem. Which
options for ICMP filtering do you have turned on in Firestarter? And are
there any events logged when you try to ping a remote machine?

I have disabled and thi ping works fine, but I must to enable it with
only unreachable option enabled in order to block the ping to my PC.

In /var/log there are this rows (related ping to google.com from my PC):

Jun 15 20:56:41 ubuntu kernel: [ 4378.452000] Inbound IN=ppp0 OUT=
MAC= SRC=64.233.183.104 DST=87.7.my.ip LEN=84 TOS=0x00 PREC=0x00
TTL=238 ID=0 DF PROTO=ICMP TYPE=0 CODE=0 ID=60764 SEQ=36

OK, this is an echo reply packet, i.e., the packet that comes back as a
result of sending out the ping packet.

In your ICMP filtering in firestarter you should allow the echo reply
option, but disable the rest.

Regards,
Tony.
--
Tony Arnold, IT Security Coordinator, University of Manchester,
IT Services Division, Kilburn Building, Oxford Road, Manchester M13 9PL.
T: +44 (0)161 275 6093, F: +44 (0)870 136 1004, M: +44 (0)773 330 0039
E: tony.arnold@xxxxxxxxxxxxxxxx, H: http://www.man.ac.uk/Tony.Arnold

--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users



Relevant Pages

  • Re: Feisty and ping
    ... I have Firestarter but I block ping requests only incoming, ... Try disabling ICMP filtering and see if that fixes the problem. ... IT Services Division, Kilburn Building, Oxford Road, Manchester M13 9PL. ...
    (Ubuntu)
  • Re: sharing files between ubuntu computers
    ... To do this i had to disable firestarter as I did not have the ... let's see you've got connectivity between the two computers without ... the Jaunty one but not the other way around (you can't access the Jaunty ... ping 192.168.xx.yy ...
    (Ubuntu)
  • Re: Feisty and ping
    ... I have a USB modem ... allow traceroute and such to work. ... I have Firestarter but I block ping requests only incoming, ...
    (Ubuntu)
  • Re: Feisty and ping
    ... options for ICMP filtering do you have turned on in Firestarter? ... there any events logged when you try to ping a remote machine? ...
    (Ubuntu)
  • Re: Ping & Physics
    ... As I'm sure you know ping retuns the time taken for the packet ... be determined from ping latency values, ... considering only the bit rate is 1.5 ms for a round trip. ...
    (comp.unix.questions)