* Tyler \[TASF]Overkill\ Schwend [2003-09-11 14:14]: > With this Blaster and Welchia crap still going around, we've been watching > ICMP (Welchia) packets pretty closely. When I took my server down for a bit > to update to Steam, I noticed the following packets: > > 09:06:04.137710 telefragged.lynchburg.edu > 61.186.110.209: icmp: > telefragged.lynchburg.edu udp port 27015 unreachable [tos 0xc0]
> Is there any documentation on these packets getting sent out? Is this part > of Linux? Or something HLDS related? Can it be disabled? > Hi Tyler, I'm replying to you directly and the list because it is still very bogged. The last email I got was from 3am this morning, and its 2:22pm. Anyway, those are normal. Because you took the server down, the box is saying that port is now unreachable (nothing is listening anymore). As for blocking them, depends on the OS. If it is linux: iptables -i INPUT -p udp --dport 27015 -j DROP Will take care of it. If you are using fbsd, use ipf (I don't know the syntax off the top of my head). You might also notice other ports being hit on too .. You'll have to block those as well untill things settle down. Hope this helps. _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
