consider dropping all multicast packets $ipt -d 224.0.0.0/4 -j DROP Paulo Andre wrote: > I have the following log: > Nov 1 09:10:40 guardian ---SA_IN--- IN=eth1 OUT= > MAC=ff:ff:ff:ff:ff:ff:00:e0:1e:83:d5:19:08:00 SRC=64.34.170.237 > DST=255.255.255.255 LEN=1072 TOS=00 PREC=0x40 TTL=243 ID=12209 DF > PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=0 > > I am receiving thousands of these a day, icmp traffic is blocked with > iptables. But still this traffic is coming up the line. Is my only > solution to contact the ISP or is there something I can do in > iptables/linux? > > Paulo > >
