🚀 go-pugleaf

Glenn T. Jayaputera (gtj@budgie.apana.org.au) wrote:
: Recently I notice this is my '/var/adm/messages' file
:  
: ICMP: 138.194.10.10: Source Route Failed.
: ICMP: 204.127.129.3: Source Route Failed.
:  
: What is this??  How do i fix this??

This message is intended as a diagnostic aid, and will certainly have its 
logging importance lowered in release versions of the kernel.  This is one 
of the beasties that have had their logging importance increased in ALPHA 
test versions of the kernel to highlight kernel security and stability 
concerns.

Basically it means that someone has sent a source routed packet to your 
machine, and it is logged for informational purposes rather than being 
dropped as was the case in production kernels.

How do you fix this?  You don't.  You could enable source routed frames
but this is not encouraged if you don't understand the message in the 
first place :-)  Enabling these frames at the kernel level would 
certainly increase the vulnerability of your machine to attacks from 
the outside world.

Graham.
--
+----------------------------------------------------------------------------+
  Graham Broadbridge        Internet <grahamb@peachy.apana.org.au>
  Marsfield   NSW                    <vk2yui@amsat.org>
  Australia                 amprnet  <vk2yui@gw.vk2yui.ampr.org>
+----------------------------------------------------------------------------+