[61983] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

92 Byte ICMP Blocking Problem

daemon@ATHENA.MIT.EDU (Richard J.Sears)
Fri Sep 12 13:43:50 2003

Date: Fri, 12 Sep 2003 10:42:58 -0700
From: Richard J.Sears <rsears@adnc.com>
To: Nanog <nanog@nanog.org>
Errors-To: owner-nanog-outgoing@merit.edu


We started blocking 92 Byte ICMP packets on our ingress points on our
core backbone routers.

This was a recommendation from Cisco to help mitigate the effects of the
Nachi worm.

Since then, we have been hammered with customer complaints concerning
the inability to talk to mail servers and ssh to their servers, as well
as other weird network issues, all centering around the time we started
blocking 92 Byte ICMP packets.

Has anyone else seen this, and if so, is the only resolution to stop the
blockage of 92 Byte ICMP Packets..?

Thanks

Richard




home help back first fref pref prev next nref lref last post