Ping enabled but huge packet lose?
Posted: 25 Feb 2013, 13:52
Hi,
So just recently my own IP was suddenly blocked by CSF which cause some confusion, I have no idea why this happened but well all done and fixed, not the problem I opened this thread for. So while I was still unaware of this being the cause for me not loading my websites (for me) I was using: just-ping . com website to check my server.
There has a HUGE packet lose rate.. pretty much all locations has 20 - 100 % packet lose. The 100% package lose would be explained blocked by firewall however I do not understand the 20 - 90% packet lose rates in this case.
from my conf file:
# Allow incoming TCP ports
TCP_IN = "20,21,22,25,53,80,110,143,443,3306,3307,4444,4567,4568,7538,8891"
# Allow outgoing TCP ports
TCP_OUT = "20,21,22,25,53,80,110,113,443,3306,3307,4444,4567,4568,7538,8891"
# Allow incoming UDP ports
UDP_IN = "20,21,53"
# Allow outgoing UDP ports
# To allow outgoing traceroute add 33434:33523 to this list
UDP_OUT = "20,21,53,113,123"
# Allow incoming PING
ICMP_IN = "1"
# Set the per IP address incoming ICMP packet rate
# To disable rate limiting set to "0"
ICMP_IN_RATE = "1/s"
# Allow outgoing PING
ICMP_OUT = "1"
# Set the per IP address outgoing ICMP packet rate (hits per second allowed),
# e.g. "1/s"
# To disable rate limiting set to "0"
ICMP_OUT_RATE = "0"
Now I've disabled csf / lfd using 'csf -x' command and tried the ping test again using the same site result: ALL OKAY.
Is this an issue with the ICMP rate? Or is this a bug?
So just recently my own IP was suddenly blocked by CSF which cause some confusion, I have no idea why this happened but well all done and fixed, not the problem I opened this thread for. So while I was still unaware of this being the cause for me not loading my websites (for me) I was using: just-ping . com website to check my server.
There has a HUGE packet lose rate.. pretty much all locations has 20 - 100 % packet lose. The 100% package lose would be explained blocked by firewall however I do not understand the 20 - 90% packet lose rates in this case.
from my conf file:
# Allow incoming TCP ports
TCP_IN = "20,21,22,25,53,80,110,143,443,3306,3307,4444,4567,4568,7538,8891"
# Allow outgoing TCP ports
TCP_OUT = "20,21,22,25,53,80,110,113,443,3306,3307,4444,4567,4568,7538,8891"
# Allow incoming UDP ports
UDP_IN = "20,21,53"
# Allow outgoing UDP ports
# To allow outgoing traceroute add 33434:33523 to this list
UDP_OUT = "20,21,53,113,123"
# Allow incoming PING
ICMP_IN = "1"
# Set the per IP address incoming ICMP packet rate
# To disable rate limiting set to "0"
ICMP_IN_RATE = "1/s"
# Allow outgoing PING
ICMP_OUT = "1"
# Set the per IP address outgoing ICMP packet rate (hits per second allowed),
# e.g. "1/s"
# To disable rate limiting set to "0"
ICMP_OUT_RATE = "0"
Now I've disabled csf / lfd using 'csf -x' command and tried the ping test again using the same site result: ALL OKAY.
Is this an issue with the ICMP rate? Or is this a bug?