TIP: Click on subject to list as thread! ANSI
echo: linuxhelp
to: Geo
from: Randall Parker
date: 2006-07-24 16:20:04
subject: Re: Is the Barkto news group server slow today?

From: Randall Parker 

Geo wrote:
> I've never seen anything like that but I would guess that you are blocking
> something in your router or firewall that the system is using as a keepalive
> method. It could be that icmp.

I found an admin page which has Add Service. Then there is a Service Definition:

Name:
Type: (ICMP is a choice here)
Start Port:
Finish Port:
Default QoS Priority:

Should I use this and set something?

>If you are using NAT (which 192.168.x.x IP's
> suggest you are) then you don't need to block icmp at the router so try
> taking that filter out of your router and see if that fixes it.
>
> Geo.

The firewall and the router are both the Netgear FVG318. I use
http://www.routerlogin.net to get into admin forms for it in my browser.

The Netgear box has a category "Domain Name Server (DNS) Address"
for which "Get Automatically From ISP" is checked. I could put a
particular DNS server address there instead. Any suggestions for one to
try?

I found the Security section and Rules page.

It has Outbound Services for which I have Enable "Yes", Service
Name "Any", Action "ALLOW always", Lan Users
"Any", Wan Users "Any", Priority "None", Log
"Always".

In the "Inbound Services" section the action is "BLOCK always".

For Attack Checks I have checked:

    Enable VPN Passthrough (IPSec, PPTP, L2TP)
    Enable DNS Proxy
    Enable Stealth Mode

I do not have turned on:
    Drop fragmented IP packets
    Block TCP flood
    Block UDP flood
    Disable SIP ALG

--- BBBS/NT v4.01 Flag-5
* Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)
SEEN-BY: 633/267 270 5030/786
@PATH: 379/45 1 106/2000 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.