Firewall-1

Re: [FW-1] Pings between cluster members

Subject: Re: [FW-1] Pings between cluster members
From: "Christian 'Rana' Schlegel" <mailinglist-chris AT GMX DOT AT>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 27 Aug 2004 09:06:18 +0200
Hi Salomé,

> Hi everybody. Does anyone know why I am having ICMP packets
> between cluster members. I have had to add a rule to permit ICMP
> packets between members cluster in order to have the cluster
> working. Do you know why it is happening this?
> What are this ICMP packets used for?

I have seen this on our Clusters too. We're using SPLAT with NG AI R55
and the cluster is configured as Loadbalancing with two nodes.

The pings starts AFTER the other node becomes an active member. The
pings are dropped with reason:
   "ICMP: Echo Reply ICMP Type: 0 ICMP Code: 0 message_info: ICMP
   reply does not match a previous request"

I don't know the reason of the ping-packets, but dropping them does
not affect the cluster.

HTH
Christian
--
        Neues auf meiner Heimatseite im Web. Frisch seit Dezember 2003:
            ein neuer Malediven-Urlaub mit den schönsten Photos
                rana AT rana DOT at                http://rana.at
                  Viel Spaß beim Besuch meiner Webseite!

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>