Only able to ping in one direction

[grale22]

Hi,

I've got a server which can ping out and gets a response, but if you try to ping it from another server you get no response.

When you ping this server from another, the syslog on the server shows this message -

0 84 icmp 8/0 INhp62 ipmon[673]: 10:09:04.390000 lan0 @0:8 b 172.17.3.101 -> 172.17.3.62 PR icmp len 2

This shows that the ping is getting through, the server is just not responding.

The server is an RX8620.

Any ideas?

[Matti_Kurkela · Accepted solution]

ipmon is an accessory of ipfilter.

If ipmon is active, it strongly suggests that someone may have set up ipfilter on that server.
Ipfilter could easily prevent the server from answering pings, if so desired.

Documentation of ipfilter:
http://www.docs.hp.com/en/internet.html#IPFilter

Before making any changes to the ipfilter configuration, I suggest you try to find out what is the purpose of ipfilter in this case. Is it just a generic extra layer of security, or is it installed for some specific purpose?

Find out if there is any documentation of the ipfilter setup. If the person who set up that ipfilter is available, it may be easiest to just ask.

MK

[Steven E. Protter]

Shalom,

on the rx8620 box.

tcpdump -i lan0

You should see that the system sees and drops the ping.

What this means is that ipfilter has been installed but configured to drop all packets or all packets on ports 8 and 11.

So someone intended this, whether it be the original configuration from the factor or some other administrator.

SEP

[grale22]

Bang on both of you. Was a new install and was set to reject all pings.

Sorted now. Thanks.