|
> Hendrik Thiel wrote:
>
> Hi everybody,
>
> i noticed this in dmesg and messages:
>
> kernel: IP_MASQ:reverse ICMP:failed checksum from 213.xxx.xxx.xxx!
> last message repeated 1522 times.
> Is this lvs specific (using nat) ? or can this be an attack?
This pops up in the mailing list every now and again (look for checksum)
eg
http://marc.theaimsgroup.com/?l=linux-virtual-server&m=96516171218312&w=2
It's also mentioned in the HOWTO
http://www.linuxvirtualserver.org/Joseph.Mack/HOWTO/LVS-HOWTO-18.html#ss18.13
where ICMP handling for VS-NAT is discussed.
We still don't know what the problem is. Since it's seen in non-LVS situations,
it probably isn't an LVS problem.
Joe
--
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center,
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA
|
