netdev
[Top] [All Lists]

RE: Who is 2001:230:201:1:203:31ff:fe4b:4000, it's ping-reply flooding

To: "'Peter Bieringer'" <pb@xxxxxxxxxxxx>, <users@xxxxxxxx>
Subject: RE: Who is 2001:230:201:1:203:31ff:fe4b:4000, it's ping-reply flooding me
From: "NDSoftware" <extml@xxxxxxxxxxxxxx>
Date: Tue, 28 Aug 2001 16:01:17 +0200
Cc: <linux-ipv6@xxxxxxxxxxxxx>, <netdev@xxxxxxxxxxx>, <usagi-users@xxxxxxxxxxxxxx>
Importance: Normal
In-reply-to: <20010828131605.4791.qmail@titan.bieringer.de>
Sender: owner-netdev@xxxxxxxxxxx
Hi Peter,

ETRI-KRNIC-KR-19991124         2001:230::/35

You use a firewall for log that ?
What's firewall do you use (what's your OS) ?

Thanks

-----Original Message-----
From: owner-users@xxxxxxxx [mailto:owner-users@xxxxxxxx] On Behalf Of
Peter Bieringer
Sent: Tuesday, August 28, 2001 3:16 PM
To: users@xxxxxxxx
Cc: linux-ipv6@xxxxxxxxxxxxx; netdev@xxxxxxxxxxx;
usagi-users@xxxxxxxxxxxxxx
Subject: Who is 2001:230:201:1:203:31ff:fe4b:4000, it's ping-reply
flooding me



Hi,

I got a ICMPv6 ping "echo reply" flood from that host to my tunnel:

Who the hell is using an IPv6 address out of my space as source address?
Looks like IPv6 gateways need anti spoofing filters!

15:10:17.567312 128.176.191.66 > 195.226.187.50:
2001:230:201:1:203:31ff:fe4b:4000 > 3ffe:400:100:f101::40: icmp6: echo
reply (encap)
15:10:17.567669 195.226.187.50 > 128.176.191.66:
2001:230:201:1:203:31ff:fe4b:4000 > 3ffe:400:100:f101::40: icmp6: echo
reply (encap)


Peter

---------------------------------------------------------------------
The IPv6 Users Mailing List
Unsubscribe by sending "unsubscribe users" to majordomo@xxxxxxxx


<Prev in Thread] Current Thread [Next in Thread>