Peter Mueller <pmueller@xxxxxxxxxxxx> wrote:
>>
>> > Hi everybody,
>> >
>> > i noticed this in dmesg and messages:
>> >
>> > kernel: IP_MASQ:reverse ICMP:failed checksum from 213.xxx.xxx.xxx!
>> > last message repeated 1522 times.
>> > Is this lvs specific (using nat) ? or can this be an attack?
>> >
>
> What is a reverse ICMP checksum? I'm assuming some kind of ICMP 'is it DoS'
> validity check? Anyone know?
From time to time I see them also on a firewall masquerading the companies
net. I always assumed it is a corrupted ICMP packet... Who knows...
Juri
--
Juri Haberland <juri@xxxxxxxxxxxxxx>
|