[Shorewall-users] Neighbour table overflow

Adam Henry
Mon, 28 Oct 2002 17:07:14 -0000

--0F1p//8PRICkK4MW
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Oct 27, 2002 at 04:20:21PM -0800, Tom Eastep
wrote:
> >| Oct 25 11:30:36 fw kernel: Shorewall:rfc1918:DROP:IN=3DSerial0
> >| OUT=3D MAC=3D SRC=3D10.3.32.1 DST=3Daaa.aaa.aaa.aaa LEN=3D56
TOS=3D0x00 PREC=3D0x00
> >| TTL=3D241 ID=3D45499 PROTO=3DICMP TYPE=3D3 CODE=3D1
[SRC=3Daaa.aaa.aaa.aaa
> >| DST=3D68.97.0.94 LEN=3D84 TOS=3D0x00 PREC=3D0x00 TTL=3D52 ID=3D0 DF
PROTO=3DICMP
> >| TYPE=3D8 CODE=3D0 ID=3D11895 SEQ=3D0 ]
>=20
> I refuse to spend any time on an ICMP problem with the IP addresses=20
> falsified; they are tricky enough when you have all of the information.=20
> You might find my recent response in a thread entitled "Rejected
ICMP=20
> packets" helpful.

Sorry Tom, if I knew it was so important I wouldn''t have wasted your
time.  In the log entry quoted above, ''aaa.aaa.aaa.aaa'' is
equivalent
to ''209.176.91.56''. =20

I''m checking through the archives to see how you interpret a similar
problem.

> I''ve never seen this problem personally (although I see it
reported quite=20
> a bit on other lists) and I don''t recall anything about it.

I have noticed quite a bit of activity searching through Groups on
Google.  The most common fix I have heard suggested was to enable the
local loopback interface, which has already been done.

I do value your time.  If there are any other details you wish to know
about my setup, I will get them to you as quickly as I can.

hank

--0F1p//8PRICkK4MW
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9vW7CNa4s+gkK91QRAgK0AJ9BBNusMXlUmU5lEPfwaAe9Tq7oPwCbBruA
OOMfiO8xGmwZhRa4duGtGm4=1BwE
-----END PGP SIGNATURE-----

--0F1p//8PRICkK4MW--