Results 1 to 4 of 4

Thread: Strange ICMP activity happening on the firewall

  1. #1
    Join Date
    Nov 2010
    Posts
    49

    Strange ICMP activity happening on the firewall

    I have a laptop and i access net every single day. Also i am the only single user of my system no one else use's it. I observed a a strange problem. the problem is that i have observed that ICMP requests emerging into the my firewall wan port and i traced it going somewhere to a china manufacturing mobile device. I found it really strange. As i specified earlier that there are no other users who use my system, still its happening. So i want to know why are these china mobile manufacturer's trying to communicate with my system. So i am trying to find the reason behind it, so that i get the detailed result of whats happening. So please do help me with these strange problem. Following are the details that i can give
    ICMP Destination Unreachable, Code: 3

  2. #2
    Join Date
    Nov 2008
    Posts
    1,001

    Re: Strange ICMP activity happening on the firewall

    Looking at the code which specifies that code is 3 and the destination is unreachable. Looking at that i can say that it is not the ICMP request but it is the ICMP error response. Now this error response can only be generated when the request arrives at a port and there is nothing there to list it. So the udp port sends back with the message saying that the destination unreachable. So this can be a situation where your system may be sending such blank requests have a check with your system and if possible don't allow such type of udp connections in the firewall.

  3. #3
    Join Date
    May 2008
    Posts
    1,304

    Re: Strange ICMP activity happening on the firewall

    Well if you ask me these udp ports send such type of error message only when there is no request contained in the port. There can be several situation which may have arise. One such situation can be someone from the particular manufacturing company is trying to access the udp port of your system and your system may be replying it with the message saying that there is nothing available here. This is happening because your firewall is allowing such udp ports to enter your system. So don't allow such connections to happen from the firewall.

  4. #4
    Join Date
    Mar 2009
    Posts
    1,221

    Re: Strange ICMP activity happening on the firewall

    There can be various such scenarios arising out of this. You have specified that you are the lone user of the system and no one else access it, fine agreed but there are various such connections that are trying to connect with your system and gaining information of your system from their place and you may be having no idea whats going on. One such good e.g. of this is packet sniffer. However looking at your situation the people you have traced are the china mobile manufacturer's. Those people can be trying to port scan your firewall and configure them in such a way that they allow unsolicited UDP or they are trying to gain some important information from the system and your server is down due to some bad reason. There can also be a possibility of some one from your internal network generating the error message and is giving the source of the china mobile manufacturer's. Situations are endless but you have to be careful for your system's safety.

Similar Threads

  1. Strange things happening in PetVille
    By Sheridan^OS in forum Video Games
    Replies: 3
    Last Post: 18-02-2011, 06:36 AM
  2. How to use ICMP and Ping
    By Robert59 in forum Networking & Security
    Replies: 6
    Last Post: 17-03-2010, 11:50 PM
  3. Replies: 6
    Last Post: 27-08-2009, 09:56 AM
  4. Strange problem with Commodo Firewall
    By Kushan in forum Networking & Security
    Replies: 4
    Last Post: 18-03-2009, 01:44 PM
  5. Replies: 6
    Last Post: 07-10-2008, 03:27 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,718,202,937.73067 seconds with 16 queries