Re: MIDRANGE-L Digest V4 #42

[John Hall <jhall@xxxxxxxxxxx>]

No it logs the ping attempts normally.  If it suspects an attack it will
shut down the IP address for several minutes.

Did 20 pings - All odd ok  All even fail.

Is there a way to look at the ARP table on the 400 ?  


Jim Langston wrote:
> 
> So, every other ping is failing?
> 
> Perhaps your firewall is ignoring every other ping because it's coming
> so fast from the previous ping and it considers it a DOS attack?
> 
> Just a guess.
> 
> Try this:
> PING RMTSYS(<whatever IP>) NBRPKT(99)
> which will send 99 pings.  then see if every other one failed.  If so,
> I think it might have something to do with your firewall (again, just
> a guess).
> 
> Regards,
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---