bugtraq - Checkpoint NG3 ICMP Flood

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20061218111433.26606.qmail@securityfocus.com>
Date: 18 Dec 2006 11:14:33 -0000
From: bdmoraes@....com.br
To: bugtraq@...urityfocus.com
Subject: Checkpoint NG3 ICMP Flood

Dear All,

I have one checkpoint NG3 in my company and verifying in Tracking i have tousands of events with ICMP type 8 and type 17.

The events has origin in my internal networks, with one problem .. the Source IP is my PAT address for internal hosts to internet. 

Is there any bug of Checkpoint? Anyone already seen this event?

I will go verify with sniffers and other tools, but this IP (Only for PAT) is no routeable in my internal networks...

Thanks for attention.
Poison