會員 | 請問固三如何設定Linux的網路【求助】 請教大家, 我收到Hinet固三的設定說明, 用戶LAN起始IP=220.xxx.xxx.154 用戶LAN結束IP=220.xxx.xxx.156 用戶LAN Netmask=255.255.255.0 Gateway=220.xxx.xxx.254 當我在壹台Linux上設定網路卡eth0使用一個固定ip時, 我的Broadcast與Network應該設什麼才對? |
回覆 |
會員 | 如果沒寄錯的話 Broadcast是220.xxx.xxx.255 network是220.xxx.xxx.000 有錯的話還請各位指正 |
回覆 |
會員 | 很奇怪的訊息... 我基本上是依詢一般規則將255設為broadcast,0設為network, 但是很奇怪的, 我的linux不斷收到這樣的訊息: 168.95.82.194 sent an invalid ICMP type 11, code 0 error to a broadcast: 220.xxx.xxx.255 on eth0 所以我懷疑是我的broadcast設錯了... 或者這是其他問題呢? 煩請各位先進幫個忙... |
回覆 |
CM Board Moderator | 您用下面這個指令看一下究竟跟 168.95.82.194 之間有些什麼瓜葛: tcpdump host 168.95.82.194 |
回覆 |
Kree | 啟動防火牆 PING別人電腦的時候,是送出一種ICMP封包 大量的ICMP封包也可以造成一種攻擊,稱做阻斷服務式攻擊DoS,藉由讓伺服器不斷的回應耗用資源,來癱瘓掉目標伺服器的服務 |
回覆 |
會員 | 回覆: 很奇怪的訊息... 引用:
這是samba引起的問題, 啟動時加上這一行 echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses就不會出現了 請參考以下的說明: >Since replacing RH52 with RH60, we've started getting the error message > > kernel: x.x.x.x sent an invalid ICMP error to a broadcast. > >every five minutes from one of our upstream ISP's border gateways and also from a LAN-based ROM emulator. I'm assuming that the reporting is a function of better DoS prevention, but is anyone familiar with this symptom, and, if so, is there a way to shut it off at least for known addresses?? Gary; This is a function of the 2.2.X series kernels. To turn it off, I added the following to my /etc/rc.d/init.d file: echo 1 >/proc/sys/net/ipv4/icmp_ignore_bogus_error_responses I put it in line 93 of the file - right at the end of the "start)" portion. Note - to the best of my knowledge, this only crops up when running samba, so you could add it to the /etc/rc.d/init.d/smb file as well. | |
回覆 |
|
XML | RSS 2.0 | RSS |
本論壇所有文章僅代表留言者個人意見,並不代表本站之立場,討論區以「即時留言」方式運作,故無法完全監察所有即時留言,若您發現文章可能有異議,請 email :[email protected] 處理。