Installed SP2 on our nokia 440 this past Sat. night - running FW4.1
on it.
+++++++++++++++++++++++++
Clients to one particular web site have been complaining about error
messages saying no route to host and proxy errors stating "unable to
connect to server - connection refused" type of stuff. Particular
clients have experienced this since last Tuesday - at first we chalked
it up to possible config issue on their side; however our site began
experiencing severe slow-downs yesterday. Page retrieval lasting
up to 20-30 seconds.
While watching tcpdump on my external interface, I'm seeing hundreds of
sporadic messages where my external interface is reporting this back
to client ip addresses:
icmp: host (our web server's IP) unreachable
This will go on for awhile (most recently about 19 minutes) and then
all will be fine again.
I would think of some type of icmp bounce or something, but this error
is being returned to all client ip's - not just "spoofed looking" ips.
I wondered about bandwidth problems, but this is only happening to
one particular web server.
Any comments/insight is appreciated.
Regards,
Becky
p.s. Here's the exact message - sanitized of course because
everyone knows that obscurity is really the ONLY way to go.
har har
(watch the wrap)
05:11.2 208.xx.xxx.xxx > 12.110.xxx.xxx: icmp: host 208.xx.xxx.xxx
unreachable (DF) [tos 0xe0]
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
