My problem actually, and there was me blaming eircon! My logs were filling
up with ICMP rejects, even from the HAN. The result was that if there was
not net activity for a few minutes, I had to bring down the net and back
again otherwise nothing worked.
I reset the firewall rules last night and it seems much improved now.
However I am NOT a firewall expert - see my earlier question today!
Indeed. And, if the box is already running a webserver on an IP, blocking
ICMP to that IP isn't going to help much. A good rule of thumb is:
If a firewall blocks ICMP, it's broken.
John Looney Chief Scientist
a n t e f a c t o t: +353 1 8586004
www.antefacto.com f: +353 1 8586014
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!