Portal Home > Knowledgebase > Articles Database > kernel: Firewall: *ICMP_IN Blocked*
kernel: Firewall: *ICMP_IN Blocked*
| Posted by mixmox, 06-28-2010, 12:27 PM |
| hello
i have many lines like this on my log
Jun 28 20:16:22 sun kernel: Firewall: *ICMP_IN Blocked* IN=eth0 OUT= MAC=00:27:0e:04:c8:76:00:1d:b5:c6:63:41:08:00 SRC=91.210.98.18 DST=91.210.104.126 LEN=64 TOS=0x00 PREC=0x20 TTL=113 ID=11141 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=60940
|
| Posted by Mindraven, 06-28-2010, 06:37 PM |
| Looks like your firewall is set to block ICMP echo requests. PROTO=ICMP, TYPE=8.
So, someone is pinging your server and it's blocking it. The prefix looks like you might be running CSF, so if you want to allow pings, then you'd need to enable that in the config.
|
| Posted by tweakservers, 06-28-2010, 07:28 PM |
| Looking at your log and pinging the destination IP, apparently you have ICMP blocked as Rick said.
|
| Posted by crazyaboutlinux, 11-23-2010, 07:49 AM |
| How do i prevent for further blocking or can i add an Authenticated IP to whitelist or else ??
|
| Posted by CoderJosh, 11-23-2010, 09:55 AM |
| That depends on the firewall management package you're using. If it's CSF, you could either allow ping in general or you could add the remote IP address in question to the whitelist, either for all services or just for ICMP.
|
| Posted by crazyaboutlinux, 11-24-2010, 01:55 AM |
| you could either allow ping in general
>> How can i do this kindly provide me steps for that
or you could add the remote IP address in question to the whitelist,
>> they are using multiple IPs 202.131.xx.xxx to 202.131.xxx.xxx
either for all services or just for ICMP.
>> how can I edit for All service OR just for ICMP service
Please HELp
|
Add to Favourites 
Print this Article
Also Read
