linux user group brescia

immagine del castello

Archivio della mailing list

Ping a pc dietro router

Nicola nicbed a email.it
Gio 13 Apr 2006 11:50:13 UTC
Ciao Carlo
Scusami, ma mi sembra di essermi espresso chiaramente.

 > 2 cose :
 > 1)il ping è composto da due pacchetti:
 > quello inviato dall'esterno verso il tuo pc (ECHO_REQUEST)

Appunto è di questo che sto parlando!
come è possibile che il firewall installato su un pc locale e con un
router in mezzo, continui ad avvisarmi che blocca tentativi di Ping
proveniente da IP esterni?

Al router c'è collegato solo questo pc!


 > 2)che c'entrano le porte con l'ICMP, le porte c'entrano col livello 
trasporto (TCP e UDP), ma i'ICMP funziona a livello rete (IP).

Ho semplicemente specificato come fosse la mia configurazione di nat e
virtual server.


 > 3)Se tenti di pingare un 192.168 dall'esterno certo che non ci riesci,

infatti questo lo so, ma evidentemente c'è un modo x farlo oppure:

1. il router non fa il suo lavoro o c'è qualcosa che è configurato male
e permette di vedere questo pc dall'esterno (ma non so come)

2. oppure il personal firewall installato sul pc è un millanatatore..
cioè dice che blocca delle cose che in teoria non dovrebbero esiste?

So che non è la mailing list giusta, però se volete provare, installate
su un pc windows questo firewall www.filseclab.com (è gratuito)


Se da un pc esterno faccio il ping a questo IP, mi risponde il router e
cmq il firewall nn mi da alcun avviso di blocco.
Segno quindi che non si sta parlando del semplice ping numero_ip ma di
qualcosa di diverso.

BOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOo... ammetto la mia ignoranza !


A riprova di quanto dico vi riporto parte del file di log sul blocco ICMP


  2 Deny  SYSTEM    In   192.168.2.2    87.0.209.20     RECV/102
12.04.30   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.218.74.132   RECV/97
12.05.25   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    194.242.104.28  RECV/97
12.07.46   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    195.82.160.15   RECV/70
12.08.47   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    221.11.72.2     RECV/70
12.10.28   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.3.124.26     RECV/70
12.16.31   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    83.152.232.242  RECV/97
12.19.42   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    82.49.16.238    RECV/70
12.21.41   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    218.18.109.212  RECV/97
12.21.52   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    88.152.207.195  RECV/70
12.22.05   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    60.223.100.73   RECV/70
12.25.39   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    151.6.97.94     RECV/70
12.29.09   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    151.6.97.94     RECV/70
12.29.12   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    151.6.97.94     RECV/70
12.29.18   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    201.9.60.36     RECV/70
12.29.18   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    221.216.247.228 RECV/70
12.29.32   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    83.19.142.2     RECV/97
12.30.32   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    83.45.190.138   RECV/70
12.31.51   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    221.216.247.228 RECV/70
12.33.33   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    60.223.100.73   RECV/70
12.35.40   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.8.96.147     RECV/70
12.36.08   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    83.45.190.138   RECV/70
12.36.51   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.219.37.240   RECV/97
12.38.42   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    83.59.17.174    RECV/70
12.40.34   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    81.168.223.222  RECV/70
12.44.15   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    84.220.143.114  RECV/70
12.44.51   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    60.223.100.73   RECV/97
12.46.40   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    80.35.64.241    RECV/70
12.48.30   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    222.141.20.226  RECV/97
12.50.16   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    81.168.223.222  RECV/70
12.52.15   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    84.173.180.139  RECV/94
12.59.03   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    81.37.190.52    RECV/97
13.03.42   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.3.232.163    RECV/70
13.07.33   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.123.40.115   RECV/97
13.07.41   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    151.6.125.94    RECV/70
13.08.43   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    151.6.125.94    RECV/70
13.08.50   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    218.170.24.143  RECV/97
13.10.37   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    222.211.146.101 RECV/70
13.10.37   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.10.108.83    RECV/102
13.12.38   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    200.164.159.232 RECV/70
13.12.54   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    151.42.76.8     RECV/70
13.13.02   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    213.155.219.89  RECV/102
13.14.09   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    194.242.104.28  RECV/97
13.15.53   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.123.40.115   RECV/97
13.16.42   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    201.22.219.223  RECV/70
13.17.43   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    87.218.74.132   RECV/97
13.18.32   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    80.94.108.44    RECV/97
13.19.22   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    89.53.153.17    RECV/70
13.24.44   ICMP_UNREACH[OTHER](Unknow Sub Code)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    83.152.232.242  RECV/97
13.24.47   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    206.105.64.216  RECV/70
13.24.59   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    58.50.13.132    RECV/70
13.26.34   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    220.175.150.196 RECV/97
13.28.55   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM



     2 Deny  SYSTEM    In   192.168.2.2    80.94.108.44    RECV/97
13.32.25   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    219.150.245.3   RECV/70
13.33.34   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    85.59.49.111    RECV/97
13.35.13   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    83.19.142.2     RECV/97
13.35.41   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    220.175.150.196 RECV/97
13.35.55   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    84.7.216.22     RECV/70
13.36.17   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    58.50.13.132    RECV/70
13.36.34   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    151.6.121.86    RECV/70
13.38.49   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    82.57.70.129    RECV/70
13.38.54   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    83.184.191.62   RECV/105
13.38.58   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    201.26.47.93    RECV/70
13.39.01   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    81.173.155.32   RECV/70
13.39.02   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    82.60.39.116    RECV/102
13.39.06   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    219.121.145.148 RECV/105
13.40.05   ICMP_UNREACH[ICMP_UNREACH_HOST](bad host)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    220.80.222.109  RECV/70
13.40.09   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    218.242.1.64    RECV/105
13.40.15   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    172.206.91.55   RECV/70
13.40.26   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM


     2 Deny  SYSTEM    In   192.168.2.2    84.56.242.119   RECV/105
13.40.33   ICMP_UNREACH[ICMP_UNREACH_PORT](bad port)|RT:9|No.2 ICMP
RulesSYSTEM





---
avast! Antivirus: In partenza messaggio pulito.
Virus Database (VPS): 0615-2, 12/04/2006
Controllato il: 13/04/2006 13.50.14
avast! - copyright (c) 1988-2006 ALWIL Software.
http://www.avast.com






Maggiori informazioni sulla lista Lug