On Tue, Nov 01, 2005 at 06:08:45 +0100, Zoltan Nagy wrote: > Paulo Andre wrote: > > I have the following log: > > Nov 1 09:10:40 guardian ---SA_IN--- IN=eth1 OUT= > > MAC=ff:ff:ff:ff:ff:ff:00:e0:1e:83:d5:19:08:00 SRC=64.34.170.237 > > DST=255.255.255.255 LEN=1072 TOS=00 PREC=0x40 TTL=243 ID=12209 DF > > PROTO=ICMP TYPE=8 CODE=0 ID=0 SEQ=0 > > > > I am receiving thousands of these a day, icmp traffic is blocked > > with iptables. But still this traffic is coming up the line. Is my > > only solution to contact the ISP or is there something I can do in > > iptables/linux? > > > > Paulo > consider dropping all multicast packets > $ipt -d 224.0.0.0/4 -j DROP If the destination IP address is 255.255.255.255, and multicast traffic defined by "224.0.0.0/24" is from 224.0.0.0 to 239.255.255.255, this won't make any difference will it? -- deviants are sacrificed to increase group solidarity Jenny Solzer
