-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Roger
I had a similar problem with my ISP. it sends a ping request as a heart beat. If nothing was returned it dropped out after 20 mins. My firewall was originally dropping ping request. I was using the monmotha firewall script http://monmotha.mplug.org/firewall/index.php and set the PING_FLOOD variable as follows. PING_FLOOD="1/s" This is used in a user defined chain as follows ${IPTABLES} -t filter -A INETIN -p icmp --icmp-type echo-request -m limit - --limit ${PING_FLOOD} -j ACCEPT ${IPTABLES} -t filter -A INETIN -p icmp --icmp-type echo-request -j ${DROP} This allows only one ping request per second so blocks DOS ping attacks but allows your ISPs ping heartbeat to be returned. This fixed my dropout problems. - -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~ | |\ |\ | | / Mark Canavan ~ | || |-||-||- http://www.inbhe.org ~ | || |/ | | \ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/ocgUsRo8bGZWxRsRAjDhAJ0RGhm1CLqnSDvAOMqEVbgEKebzAACeOXnH l6KH6PK66EMlUAxmWLOZL9Y= =vGGH -----END PGP SIGNATURE----- -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
