NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] Freaky ICMP unreachable error - help Luke, you're my only hope



Installed SP2 on our nokia 440 this past Sat. night - running FW4.1
on it.  

+++++++++++++++++++++++++
Clients to one particular web site have been complaining about error
messages saying no route to host and proxy errors stating "unable to
connect to server - connection refused" type of stuff.  Particular
clients have experienced this since last Tuesday - at first we chalked
it up to possible config issue on their side; however our site began
experiencing severe slow-downs yesterday.  Page retrieval lasting
up to 20-30 seconds.

While watching tcpdump on my external interface, I'm seeing hundreds of
sporadic messages where my external interface is reporting this back
to client ip addresses:  
icmp: host (our web server's IP) unreachable

This will go on for awhile (most recently about 19 minutes) and then
all will be fine again.

I would think of some type of icmp bounce or something, but this error
is being returned to all client ip's - not just "spoofed looking" ips.
I wondered about bandwidth problems, but this is only happening to
one particular web server.

Any comments/insight is appreciated.

Regards,
Becky

p.s.  Here's the exact message - sanitized of course because
everyone knows that obscurity is really the ONLY way to go.
har har

(watch the wrap)
05:11.2	208.xx.. > 12.110.xxx.xxx: icmp:	host 208.xx.xxx.xxx
unreachable (DF) [tos 0xe0]


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.