ICMP Destination Unreachable (Communication Administratively Prohibited)

["Dushyanth Harinath" <dushy () archeanit com>]

Hi guys,
Iam new to snort and have a little bit of networking knowledge.

I have installed snort in my server with snortdb support aand i have also
installed snortreport.Snort is working fine .I have this snort alert's  from
more that 10 source ip's targetting machine on my network.The exact message is.

ICMP Destination Unreachable (Communication Administratively Prohibited)

CID:1 [**] ICMP Destination Unreachable (Communication Administratively
Prohibited) [**]
2001-08-21 17:06:51 157.130.91.86 -> 203.115.120.210
ICMP TTL:243 TOS:0x0 ID:51765 IPLen: DgmLen:56 HLen:5 CSumIP:0xC070
Type:3 Code:13 ID: Seq:

This is just one such alert .I have got 12 alerts from different ip's in the
last 12 hrs and above 48 in the last 30 days.

I know i can disable this alert by commenting out the line in icmp.rules.But
iam not sure what this means.

I will be glad to RTFM or will someone please enlighten me about this.

Best regards
dushyanth

-- 
My computer, my documents, my briefcase, my ASS! 

Dushyanth Harinath
Programmer/Sys Admin
Archean Infotech Limited
Ph No:091-040-3228666,6570704,3228674
http://www.archeanit.com



-----------------------------------------
This email was sent using SquirrelMail.
   "Webmail for nuts!"
http://squirrelmail.org/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users