James A Griffin
agriffin at cpcug.org
Wed Mar 14 15:30:20 UTC 2001
Hasan's problem was not really BIND related and was dealt with via
private email. Kevin's insights seem to be on the mark (as usual) as
I found reason of unwanted icmp packets on another point.
It is related to network settings of HP-UX machine.
and i use the following to solve the problem:
# ndd -set /dev/ip ip_send_source_quench 0
Kevin Darcy wrote:
> I'm sure named isn't sending ICMP packets deliberately. I consider it far
> more likely that named's UDP packets are somehow triggering the networking
> code in HP-UX to generate the ICMP packets, although offhand I can't imagine
> how or why. Can you look at the ICMP packets to see what kind they are (echo
> request/reply, source quench, redirect, timestamp or whatever)? Maybe there's
> some configuration setting in HP-UX that would turn them off.
> - Kevin
> Hasan Övüç wrote:
> > Hi everyone,
> > I use bind-8.2.3 on HP-UX 11.00. Dns server is behind the firewall
> > and dns server drops all icmp packets for security.An interesting thing, i
> > see from firewall logs that dns server sends icmp packets for all queries.
> > Although, all queries are done successfull. This is fairly meaningless.
> > A short time ago, i searched mailing list archive of bind and i
> > don't find sufficient answer. I request your help.
More information about the bind-users