On Friday 10 October 2003 09:07, Rahul Amaram (2K-86) wrote: > Hi, > I am a student working as a lab assistant in my institute. We are > facing some real prob. with respect to the proxy server/gateway over > here. > > The proxy server also acts as a gateway. Now this problem is mainly > concerned with usage of Yahoo messenger. > > Initially we had only proxy server. Now in order to enable yahoo to > connect without proxy server we enabled the yahoo port (5050) through > iptables (nat). > > This worked fine for some days. But after some days whenever we used > to enable nat thru iptables, the CPU utilization used to become 100% > and the pc used to hang. > > We did tcpdump and found that we were getting too many ICMP requests. > This seems to be because of the worm "W32.Welchia.Worm" which is > spread in our network. > > We tried cleaning this worm but to no use. Now I got two quesions ... > > (1) Now assuming that it is not possible to clean that worm from the > network, is it possible for me to setup rules in iptables so that all > the ICMP requests generated by that worm are ignored ??? If your network is flooded with too many ICMP packets generated by the internal machines that are infected with the Welchia worm how will ignoring them at a particular machine help to resolve the problem of too many packets? Regards, Mike Kllnke -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
