[fw1-gurus] icmp-type 3

[Julian.Burton@xxxxxxxxxxxxxxxxxxxxxx]

Has anyone seen anything like this before?  I haven't.

This morning none of my VPNs worked.  Unfortunately it was noticed before I
got to the office and the FWs here at HQ were rebooted before I had a
chance to look at them.
Looking at the logs there are huge numbers of logs:

Origin:  FW-A
Action: drop
Service: <blank>
Source: HQ Primary FW
Dest:  FW-A
Rule:  <blank>
Info:  icmp-type 3 icmp-code 3 message_info ICMP packet out of state

These are occurring irregularly, but up to 10 times per minute.
This started 06:55 today.  When the FWs were bounced, the messages stopped.

Don't know if this is related but starting yesterday at 12:59 I got loads
of messages:
Service: CPD_amon
Source: HQ FW mgr
Dest: FW-P
These started erratically, then by 16:00 they were pretty regular every 1
minute 23 seconds.
These stopped when the HQ FWs were rebooted.

Strange, or what!

Environment:
HQ:  2 x IP530 IPSO 3.5 FCS7 FW-1 NG FP2
       Mgt server on Win2k
FW-A:  IP71 NG FP2
FW-P:  WinNT4 NG FP2
VPNs to other FWs (HQ-managed and externally-managed) also not working, but
no strange logs.

Any ideas would be appreciated!

Julian Burton




**********************************************************************
Zenith Insurance Management Limited    Registered No. 3805632
Registered @ Zenith House, Market Place, Haywards Heath,
West Sussex, RH16 1DB.

NOTICE:
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the postmaster@xxxxxxxxxxxxxxxxxxxxxx and delete the message
and any attachments accompanying it immediately.

**********************************************************************


________________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet.

---------------------------------------------------------------------
FireWall-1 Gurus Mailing List (http://www.phoneboy.com/gurus)
To unsubscribe, mailto:fw1-gurus-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, mailto:fw1-gurus-help@xxxxxxxxxxxxxxxxxx