IN= OUT=eth0 SRC=ROUTER DST=193.108.155.115 LEN=68 TOS=0x00 PREC=0xC0 TTL=64 ID=22467 PROTO=ICMP TYPE=11 CODE=0 [SRC=193.108.155.115 DST=A.LAN.HOST LEN=40 TOS=0x00 PREC=0x00 TTL=1 ID=40760 PROTO=ICMP TYPE=8 CODE=0 ID=20244 SEQ=45126 ]
[...]
Why would you consider these packets invalid - TYPE=11 is "time exceeded", CODE=0 is "maximum lifetime of the datagram exceeded" - for whatever reason those packets are generated ...
Regards, Michael
