[Dshield] ICMP problems
cbrenton at chrisbrenton.org
Wed Jun 29 03:44:17 GMT 2005
On Tue, 2005-06-28 at 16:25, Martin Forest wrote:
> Does that mean that unless I specify icmp type, i can not submit blocked
> the rejected lines looks like:
> rejected lines (up to 10)
> -> 2005-06-29 00:00:00 +12:00 123 1 22.214.171.124 0
> x.x.236.72 0 1
The problem is without the type code, the data is pretty meaningless.
Its like reporting that a TCP or UDP packet was blocked without
including the port information. Does not tell you a whole lot about what
was going on.
More information about the list