Re: Linksys Router emitting ICMP when sending e-mail attachment hangs e-mail send
From:Date: 11/13/02
- Next message: : "Re: ZoneAlaram Locks up my computer"
- Previous message: Nick Duda: "Checkpoint FW1 NG FP3 & Redhat 8.0"
- In reply to: David: "Re: Linksys Router emitting ICMP when sending e-mail attachment hangs e-mail send"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 13 Nov 2002 21:04:29 GMT
David;
Thanks for your insight on my questions. That makes sense that it
would have to fragment the data for an attachment.
So, I will keep the ZoneAlarm configured to "Trust" the router's IP
address (for the ICMPs), plus the range of DHCP assigned IP addresses
for the PCs on the LAN.
I still can't help wondering why the Verizon/Linksys/ZoneAlarm combo
package has this problem. Surely, other folks are running this
combination, and must be sending e-mails with attachments.
Oh well, just another UCP (Unexplained Computer Phenomena).
Thanks again.
Hal
On Wed, 13 Nov 2002 08:08:49 GMT, "David" <davidwnh@adelphia.net>
wrote:
>The ICMP packet is a response to a packet fragmentation error. In other
>words your packet size is too large when sending the attachments. By
>blocking this ICMP packet you restrict your operating system from adjusting
>the packet size and that is why your attachments don't get sent properly.
>
>I would add the routers internal address to trusted. It shouldn't present
>any big security hole and it will make the configuration of your firewall
>simpler.
>
>"PunchCard" <halhudson@enter.net> wrote in message
>news:q572tusepoq9utr00j1ar3jvqe72hjiue4@4ax.com...
>> ZoneAlarm Pro lists the ICMP as type 33, Subtype 4. The ZoneLog
>> Analyzer program lists it as Type 3/Subtype 4.
>>
>> Still, the source IP is 192.168.1.1, which is the address of the
>> router.
>>
>> Another silly question... When I setup ZA Firewall Zones, I simply
>> put the range of 192.168.1.100 thru 103 in the "Trusted" zone. Does
>> it go without saying that 192.168.1.1 should also be "Trusted"?
>>
>> Thanks
>> Hal
>>
>>
>>
>>
>> On Tue, 12 Nov 2002 08:08:12 GMT, "David" <davidwnh@adelphia.net>
>> wrote:
>>
>> >What type of ICMP packet was being sent?
>> >
>> >"PunchCard" <halhudsonNOSPAM@enter.net> wrote in message
>> >news:6rovsuo34pga8ifrdcj8rqjit107jcpe97@4ax.com...
>> >> I have a solution to this problem, but I would appreciate an
>> >> explanation.
>> >>
>> >> I have several WIN98SE PCs on a Peer-to-peer LAN connected through a
>> >> Linksys router. Each PC also has the companion ZoneAlarm Pro
>> >> firewall.
>> >>
>> >> When one of the PCs tries to send an e-mail, it works OK. If the
>> >> e-mail has an attachment, however, I get back an ICMP message from the
>> >> router's IP address. As originally configured, ZA was blocking (and
>> >> logging thank goodness) the ICMP, so the Outlook Express send would
>> >> hang until timeout.
>> >>
>> >> I configured Zone Alarm to put the ICMP from 192.168.1.1 (the router's
>> >> IP) into the "Trusted" zone, and the e-mails with attachments started
>> >> working.
>> >>
>> >> Now the questions.
>> >>
>> >> Is this normal behavior for the router in an e-mail attachment
>> >> scenario?
>> >>
>> >> Where can I find the SMTP and POP3 dialog protocol? Is this available
>> >> to us mere mortals?
>> >>
>> >> Have I opened myself up too much in allowing the ICMPs?
>> >>
>> >> Thanks
>> >> Hal
>> >>
>> >>
>> >
>>
>
- Next message: : "Re: ZoneAlaram Locks up my computer"
- Previous message: Nick Duda: "Checkpoint FW1 NG FP3 & Redhat 8.0"
- In reply to: David: "Re: Linksys Router emitting ICMP when sending e-mail attachment hangs e-mail send"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
