請問固三如何設定Linux的網路【求助】

[arikchao]

請教大家，
我收到Hinet固三的設定說明，
用戶LAN起始IP=220.xxx.xxx.154
用戶LAN結束IP=220.xxx.xxx.156
用戶LAN Netmask=255.255.255.0
Gateway=220.xxx.xxx.254

當我在壹台Linux上設定網路卡eth0使用一個固定ip時，
我的Broadcast與Network應該設什麼才對？

[cewolf]

如果沒寄錯的話
Broadcast是220.xxx.xxx.255
network是220.xxx.xxx.000
有錯的話還請各位指正

[arikchao]

我基本上是依詢一般規則將255設為broadcast,0設為network,
但是很奇怪的，
我的linux不斷收到這樣的訊息：

168.95.82.194 sent an invalid ICMP type 11, code 0 error to a broadcast: 220.xxx.xxx.255 on eth0

所以我懷疑是我的broadcast設錯了...
或者這是其他問題呢？

煩請各位先進幫個忙...

[raytracy]

您用下面這個指令看一下究竟跟 168.95.82.194 之間有些什麼瓜葛:

tcpdump host 168.95.82.194

[linux_xp]

啟動防火牆

PING別人電腦的時候，是送出一種ICMP封包

大量的ICMP封包也可以造成一種攻擊，稱做阻斷服務式攻擊DoS，藉由讓伺服器不斷的回應耗用資源，來癱瘓掉目標伺服器的服務

[wansg]

最初由 arikchao 發表
我基本上是依詢一般規則將255設為broadcast,0設為network,
但是很奇怪的，
我的linux不斷收到這樣的訊息：

168.95.82.194 sent an invalid ICMP type 11, code 0 error to a broadcast: 220.xxx.xxx.255 on eth0

所以我懷疑是我的broadcast設錯了...
或者這是其他問題呢？

煩請各位先進幫個忙...

這是samba引起的問題，
啟動時加上這一行
echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses就不會出現了

請參考以下的說明:

>Since replacing RH52 with RH60, we've started getting the error message
>
> kernel: x.x.x.x sent an invalid ICMP error to a broadcast.
>
>every five minutes from one of our upstream ISP's border gateways and also
from a LAN-based ROM emulator. I'm assuming that the reporting is a
function of better DoS prevention, but is anyone familiar with this
symptom, and, if so, is there a way to shut it off at least for known
addresses??

Gary;

This is a function of the 2.2.X series kernels.

To turn it off, I added the following to my /etc/rc.d/init.d file:

echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses

I put it in line 93 of the file - right at the end of the "start)" portion.

Note - to the best of my knowledge, this only crops up when running samba,
so you could add it to the /etc/rc.d/init.d/smb file as well.