From owner-freebsd-ipfw Sun Sep 19 18:41:26 1999 Delivered-To: freebsd-ipfw@freebsd.org Received: from gndrsh.dnsmgr.net (GndRsh.dnsmgr.net [198.145.92.4]) by hub.freebsd.org (Postfix) with ESMTP id A5670152E9 for ; Sun, 19 Sep 1999 18:41:15 -0700 (PDT) (envelope-from rgrimes@gndrsh.dnsmgr.net) Received: (from rgrimes@localhost) by gndrsh.dnsmgr.net (8.9.3/8.9.3) id SAA56860; Sun, 19 Sep 1999 18:40:33 -0700 (PDT) (envelope-from rgrimes) From: "Rodney W. Grimes" Message-Id: <199909200140.SAA56860@gndrsh.dnsmgr.net> Subject: Re: what is 'ICMP:3.13' ? In-Reply-To: <37E581BD.6529BEF1@sys.com.sg> from Brian Tan at "Sep 20, 1999 00:37:17 am" To: brian@sys.com.sg (Brian Tan) Date: Sun, 19 Sep 1999 18:40:33 -0700 (PDT) Cc: freebsd-ipfw@FreeBSD.ORG, bvi@rucus.ru.ac.za (Barry Irwin) X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Hi All, > > Besides the ICMP:x:x messages, does anyone know what "Deny P:9" mean, as > in > > ipfw: 10900 Deny P:9 XXX.XXX.XXX.XXX 255.255.255.255 in via rl0 Yea... you have someone running some form of igp, it literally mans Protocol 9 as in what is listed in /etc/protocols: igp 9 IGP # any private interior gateway (Cisco: for IGRP) Got any Ciscos around??? > Thanks > Brian > Barry Irwin wrote: > > > > On Thu 1999-09-16 (19:30), AAKopeyko@rio.ru wrote: > > > Hi All! > > > > > > Yesterday I add new rule > > > > > > ipfw add 802 allow log icmp from any to XXX.XXX.XXX.XXX > > > > > > and now have a lot of > > > > > > > ipfw: 802 Accept ICMP:3.13 XXX.XXX.XXX.XXX yyy.yyy.yyy.yyy in via tun0 > > > > > > in log. > > > > > > Can anybody explain what 'ICMP type 3 code 13' message is? rfc 792, 950 never > > > talk about it. > > > > >From TCP/IP Illustrated volume I ( Stevens) > > > > ICMP Type 3 code 13: > > communication administritavely prohibited by filter > > (Error stat) > > > > In other words somwhere your traffic is being blocked by a server/router > > which is being kind enough to tell you that this has been blocked by an > > adminitritive rule, rather than the service being unavalible etc. > > > > Barry > > -- > > -------------------------------------------------------------------------- > > Barry Irwin IRC: balin@zanet (#linux) > > bvi@moria.org http://rucus.ru.ac.za/~bvi > > Whois BI414 - PMPN8EZ - http://moria.org > > -------------------------------------------------------------------------- > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-ipfw" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-ipfw" in the body of the message > -- Rod Grimes - KD7CAX - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message