Firewall Wizards mailing list archives
ICMP type3/code3
From: Lance Spitzner <spitzner () dimension net>
Date: Thu, 24 Jun 1999 13:03:08 -0400 (EDT)
My DNS servers are receiving a great deal of ICMP type3/code3 at random times. 3 Destination Unreachable [RFC792] Codes 0 Net Unreachable 1 Host Unreachable 2 Protocol Unreachable 3 Port Unreachable My IDS scripts kick off thinking this is some type 'smurf' attack, as I can receive a large number of packets in a very short time. Also, this tends to be random, as my DNS servers will not receive any ICMP 3/3 packets for a week, then in a single day I will recieve a total of 700+ packets in an hour from 4 different sources. I know of several other people who have reported this same issue. Is this a security issue, or a bind issue? Thanks Lance Spitzner http://www.enteract.com/~lspitz/papers.html Internetworking & Security Engineer Dimension Enterprises Inc
Current thread:
- ICMP type3/code3 Lance Spitzner (Jun 28)