RE: [FW1] - Irregular ICMP Unreachable Messages being returned from Firewall

[Smith, Martin]

Thanks for the reply but we have now sorted the problem.    Just for everybody’s information we had to set up a static route on the Nokia box to circumvent an undocumented feature (i.e. bug) in FW1 on the Nokia that this behaviour sometimes happens because NAT can’t cope.  We found the solution eventually in the Nokia knowledge base.   Regards   Martin Smith Internet Development Manager Dow Jones Newswires   Tel: +44 207 842 9873 Fax: +44 207 842 9874 Email: [EMAIL PROTECTED] Web: www.dowjonesnews.com   EMAIL Confidentiality Statement The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Brockhoven, Werner Sent: 25 September 2001 08:20 To: 'Smith, Martin'; FW1 List Cc: Niall, Declan; Bukovec, Mark; [EMAIL PROTECTED] Subject: RE: [FW1] - Irregular ICMP Unreachable Messages being returned from Firewall   Hello,   Maybe this is a little to generic/obvious, but have you verified that you aren't having any network problems when this happens ?  Can you ping the IP address of the internal host when this happens ?   Regards,   Werner -----Original Message----- From: Smith, Martin [mailto:[EMAIL PROTECTED]] Sent: Monday, September 24, 2001 1:14 PM To: FW1 List Cc: Niall, Declan; Bukovec, Mark; [EMAIL PROTECTED] Subject: [FW1] - Irregular ICMP Unreachable Messages being returned from Firewall Hi All,   I know something similar to what I am asking has been posted before but I couldn’t see any responses so here goes again.   We have an IP440 running FW1 (v 4.1) protecting a web farm.  All seems to run perfectly except for the fact that randomly and sometimes very often the firewall will apparently stop seeing a particular IP address  on the internal network and respond to all clients with an ICMP type 3 code 1 (Host unreachable message), this can continue for a few seconds or a few minutes.   During this time the site appears to hang for the users and they may receive a page cannot be displayed error.   Has anyone seen this behaviour before and if so does anyone PLEASE know a cure, I am now starting to rip my hair out over this.   Thanks in advance.     Regards   Martin Smith Internet Development Manager Dow Jones Newswires   Email: [EMAIL PROTECTED] Web: www.dowjonesnews.com   EMAIL Confidentiality Statement The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.