arikchao
2004-06-16, 01:11 AM
請教大家,
我收到Hinet固三的設定說明,
用戶LAN起始IP=220.xxx.xxx.154
用戶LAN結束IP=220.xxx.xxx.156
用戶LAN Netmask=255.255.255.0
Gateway=220.xxx.xxx.254
當我在壹台Linux上設定網路卡eth0使用一個固定ip時,
我的Broadcast與Network應該設什麼才對?
贊助商連結
cewolf
2004-06-16, 01:33 AM
如果沒寄錯的話
Broadcast是220.xxx.xxx.255
network是220.xxx.xxx.000
有錯的話還請各位指正
arikchao
2004-06-16, 09:07 AM
我基本上是依詢一般規則將255設為broadcast,0設為network,
但是很奇怪的,
我的linux不斷收到這樣的訊息:
168.95.82.194 sent an invalid ICMP type 11, code 0 error to a broadcast: 220.xxx.xxx.255 on eth0
所以我懷疑是我的broadcast設錯了...
或者這是其他問題呢?
煩請各位先進幫個忙...
raytracy
2004-06-18, 03:05 PM
您用下面這個指令看一下究竟跟 168.95.82.194 之間有些什麼瓜葛:
tcpdump host 168.95.82.194
linux_xp
2004-06-19, 03:47 PM
啟動防火牆
PING別人電腦的時候,是送出一種ICMP封包
大量的ICMP封包也可以造成一種攻擊,稱做阻斷服務式攻擊DoS,藉由讓伺服器不斷的回應耗用資源,來癱瘓掉目標伺服器的服務
wansg
2004-06-24, 09:21 AM
最初由 arikchao 發表
我基本上是依詢一般規則將255設為broadcast,0設為network,
但是很奇怪的,
我的linux不斷收到這樣的訊息:
168.95.82.194 sent an invalid ICMP type 11, code 0 error to a broadcast: 220.xxx.xxx.255 on eth0
所以我懷疑是我的broadcast設錯了...
或者這是其他問題呢?
煩請各位先進幫個忙...
這是samba引起的問題,
啟動時加上這一行
echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses就不會出現了
請參考以下的說明:
>Since replacing RH52 with RH60, we've started getting the error message
>
> kernel: x.x.x.x sent an invalid ICMP error to a broadcast.
>
>every five minutes from one of our upstream ISP's border gateways and also
from a LAN-based ROM emulator. I'm assuming that the reporting is a
function of better DoS prevention, but is anyone familiar with this
symptom, and, if so, is there a way to shut it off at least for known
addresses??
Gary;
This is a function of the 2.2.X series kernels.
To turn it off, I added the following to my /etc/rc.d/init.d file:
echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses
I put it in line 93 of the file - right at the end of the "start)" portion.
Note - to the best of my knowledge, this only crops up when running samba,
so you could add it to the /etc/rc.d/init.d/smb file as well.