From: "Gáspár Lajos" <swifty@freemail.hu>
To: Netfilter list <netfilter@vger.kernel.org>
Subject: "invalid packets" and "bad HW ICMP checksum"
Date: Wed, 29 Oct 2008 18:10:03 +0100 [thread overview]
Message-ID: <490898EB.4080307@freemail.hu> (raw)
Hi List,
My firewall logs many of the following packets!
Can anyone help me with it?
I found a similar post:
http://lists.netfilter.org/pipermail/netfilter/2007-July/069183.html
I use REJECT too and have two interfaces but nothing special.
fw01 kernel: nf_ct_icmp: bad HW ICMP checksum IN= OUT=
SRC=87.171.106.238 DST=[EXT_IP] LEN=154 TOS=0x00 PREC=0x00 TTL=56
ID=35986 PROTO=ICMP TYPE=3 CODE=1 [SRC=[EXT_IP] DST=87.171.106.238
LEN=126 TOS=0x00 PREC=0x00 TTL=118 ID=59786 PROTO=UDP SPT=11405
DPT=64067 LEN=106 ]
fw01 kernel: nf_ct_icmp: bad HW ICMP checksum IN= OUT= SRC=70.55.137.237
DST=[EXT_IP] LEN=154 TOS=0x00 PREC=0x00 TTL=35 ID=30825 PROTO=ICMP
TYPE=3 CODE=3 [SRC=[EXT_IP] DST=70.55.137.237 LEN=126 TOS=0x00 PREC=0x00
TTL=108 ID=59731 PROTO=UDP SPT=11405 DPT=25756 LEN=106 ]
fw01 kernel: nf_ct_tcp: invalid packet ignored IN= OUT=
SRC=195.228.240.23 DST=[EXT_IP] LEN=52 TOS=0x00 PREC=0x00 TTL=59
ID=60017 DF PROTO=TCP SPT=80 DPT=59558 SEQ=3345506104 ACK=508060430
WINDOW=33792 RES=0x00 ACK URGP=0 OPT (0101080A2F70DB47013D0A2B)
Swifty
reply other threads:[~2008-10-29 17:10 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=490898EB.4080307@freemail.hu \
--to=swifty@freemail.hu \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).