There are actually 3 ip addresses that rotate in giving me these messages.
203.167.81.145
203.167.81.150
203.167.81.245
I was able to trace them and 2 belonged to a local isp to whom I know
someone.
...145 and ...150 belonged to Eastern Telecoms
...245 belonged to DriveNet
I thought they were ping floods because there was a rash of DOS attack using
ping floods before.
I used www.google.com and found out a lot of sysads have been talking about
this too.
Wala lang nga tayong laban. But they said we can ban these ips sa router?
Perhaps I should talk to our main IT dept.
Anyway, okay lang to. Ang kulit lang kasi eh.
Thanks all.
Fritz Mesedilla
Systems Administrator
Summit Interactive, Inc.
FHM | Seventeen | Candy | Cosmopolitan | Preview | Good Housekeeping
femalenetwork.com | candymag.com | fhm.com.ph | cosmo.com.ph
Palm Pilot Software: TVSked - Download from the link below
----------------------------------------------------------------------------
http://mesedilla.tripod.com +Basta Ikaw Lord
-----Original Message-----
From: Miguel A.L. Paraz [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 11, 2001 9:51 PM
To: [EMAIL PROTECTED]
Subject: Re: [plug] ip address trace route
On Tue, Sep 11, 2001 at 06:47:27PM +0800, Fritz Mesedilla wrote:
> kernel: IP_MASQ:reverse ICMP: failed checksum from 203.167.81.150!
If I'm not mistaken, that's not a ping flood. Something caused the ICMP
packet to get corrupt. 203.167.81.150 is actually an ISP server - telnet
to port 25, that's how you can identify IP's when there is no reverse DNS,
or no whois info. (whois shows it's ETPI, the upstream provider who owns
the space)
_
Philippine Linux Users Group. Web site and archives at
http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
