Problem with ICMP.

Posted: Mon Jan 12, 2004 5:53 am

I'm not that deep into firewalls/security, but it seems HL sends
some kind of malformed ICMP packet, or the server I just pinged returned a malformed one.

Don't know if you ever heard of this before but it would be nice to see some kind of solution for it.

Also when this error happens, none of the ping times show correct values.
I can get by this by disabling my firewall entirly, but this isn't good practice isn't it Smile

Hope to be of any help to other users who experience similar problems.

Any more facts you want to know, just post em here.

PS: I already know 100% sure it isn't my ISP blocking/filtering the ICMP messages.

Hyper Postman Joined: Feb 06, 2003 Posts: 479 Location: AU

Hello . Try giving Asynchronous Ping or its better knowen name aping.exe full access. There should be a rule you can make to Allow it.
Your firewall is having a freak out because it thinks all the pinging is a possible ddos attack I am thinking... These attacks are not made to infiltrate your machine but to overload it while it responds to the ping requests sent by other machines. This is not the case with the HL client. A ddos attack on a server can take all priority off things like page requests etc and render it useless for anyone to visit. But the ping requests are thousands of times more than anything HL does. You get allot of ping requests at the HL because thats how everyone sees your latency to them (ping).
Read up in the Sygate Personal Firewall manual on how to let them pass. Usually you have to make a *rule*. Not been a sygate user I am only guessing. You might want to post up a the softwares forum or tech support for a more definitive answer.

Posted: Mon Jan 12, 2004 8:13 pm

Hi again,

Async ping is already getting full permissions...
Although it still doesn't seem to allow those malformed packets.
Also there doesn't seem to be any option to allow malformed packets on application or rule base.

So I guess I'm stuck with 3 options:
1) Get another firewall and see if it can allow it
2) Keep my firewall open during HL times
3) Don't care about ping Smile

Thx for the tip anyway.