• April 20, 2025, 04:57:45 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Blocked outgoing ICMP packet ...what is ?  (Read 6587 times)

hispanico

  • Level 1 Member
  • *
  • Posts: 24
Blocked outgoing ICMP packet ...what is ?
« on: October 13, 2008, 01:13:40 PM »

I have 2 computer in the same network, all with windows vista 32bit....the firts is at 192.168.0.1 and the second is at 192.168.03....in the log of router i have a lot, lot of this message:

[INFO]   Mon Oct 13 21:50:34 2008   Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.3 to 1.242.1.98
[INFO]   Mon Oct 13 21:50:34 2008   Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.3 to 39.234.169.93
[INFO]   Mon Oct 13 21:50:33 2008   Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.3 to 22.244.180.249

only at machine 192.1.68.0.3,...while at address 192.168.0.2 nothing.
What is ??

Thank
Hyspa
« Last Edit: October 13, 2008, 01:15:48 PM by hispanico »
Logged

Fatman

  • Level 9 Member
  • ****
  • Posts: 1675
Re: Blocked outgoing ICMP packet ...what is ?
« Reply #1 on: October 13, 2008, 01:55:35 PM »

That is your router blocking messages from internal PCs that they are not accepting connections on the ports listed.  If a host does not allow connections to a particular port (or from a particular port or IP) then it with either send back a ICMP type 3 packet informing the remote host the port will not accept connections (it is closed) or it will silently drop the communication (it is stealthed).

This router is forcing your PC to drop those ICMP packets (and therefore make it stealthed) by dropping them and logging the drop on it's way out, this is considered best security practice and is allowed by the standards.

The reason only 192.168.0.3 is causing these messages is because you have either manually or through UPnP opened those ports to it, or you have a connection from that port to that host/port still in the state table, and it is not listening in on them (anymore).

** Edited for spelling and grammer and to remove slip ups in terminology**
« Last Edit: October 13, 2008, 01:57:11 PM by Fatman »
Logged
non progredi est regredi

hispanico

  • Level 1 Member
  • *
  • Posts: 24
Re: Blocked outgoing ICMP packet ...what is ?
« Reply #2 on: October 13, 2008, 02:06:01 PM »

Thank...so if i understand well is normal for my configuration..or you advise some settings for not have these message ??

Hyspa

Fatman

  • Level 9 Member
  • ****
  • Posts: 1675
Re: Blocked outgoing ICMP packet ...what is ?
« Reply #3 on: October 13, 2008, 03:50:03 PM »

You can safely ignore them.
Logged
non progredi est regredi