I take that back! I am blind ! A packet is returning to your server as Andreas said...
Oops Peter. ----- Original Message ----- From: "Peter Robb" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 20, 2002 2:22 PM Subject: Fw: Cryptic message... > The MAC address says it was originated on the local LAN... > so an internal machine sent an icmp out... in response to an incoming dns > reply from 204.144.132.162 > > Pegards, > Peter > > > ----- Original Message ----- > From: "Andreas Hansson" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, September 20, 2002 2:07 PM > Subject: Re: Cryptic message... > > > > > > > > > > kernel: IN=eth0 OUT= MAC=00:50:da:05:c5:f4:00:04:dd:0b:e0:92:08:00 > > > > SRC=210.11.68.47 DST=204.144.132.162 LEN=56 TOS=0x00 PREC=0x00 TTL=238 > > ID=14090 > > > > PROTO=ICMP TYPE=3 CODE=3 [SRC=204.144.132.162 DST=210.11.68.47 LEN=121 > > TOS=0x00 > > > > PREC=0x00 TTL=248 ID=37692 DF PROTO=UDP SPT=53 DPT=62408 LEN=101 ] > > > > > > > > 204.144.132.162 is my server. > > > > > > 210.11.68.78 is answering with a "port unreachable" (Type 3 ,Code 3) to > > > a DNS request from 204.144.132.162 > > > > > > > I'd say it's the reverse: > > 210.11.68.47 made a dns request from port 62408 to your dns server > > 204.144.132.162 > > > > Your server 204.144.132.162 replied, but either 210.11.68.47 is > > misconfigured or the program that sent the request has closed, so you get > an > > icmp port unreachable back for your reply. > > > > Andreas > > > > > > > > -- > > redhat-list mailing list > > unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe > > https://listman.redhat.com/mailman/listinfo/redhat-list > > > > -- > redhat-list mailing list > unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe > https://listman.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
