Re: ICMP Destination Unreachable, Administratively Prohibited

On Fri, 2003-02-14 at 11:35, Neil Dickey wrote:
>
> My questions are these: Does anyone know what sort of probe is being used?

In my experience most Dst URs are the result of DOS attacks by third parties who have use forged sources addresses (some being yours). The result is that someone blocks the traffic at a router somewhere and unless they think to disable URs they spray out all over the net.

-- 
Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand

"It aint necessarily so"  - Gershwin


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com