I have a proxy server which has two network interfaces:
•The external (ProxyIP) connected to a modem router (RouterIP)
•The internal connected to the local network.
I was analyzing the traffic in the Proxy external interface with wireshark (thanks wireshark team). There are a lot of packets in one way only: from the Proxy interface to the Router network interface. The log from wireshark is the following:
[ProxyIP] [RouterIP] ICMP 624 Unknown ICMP (obsolete or malformed?)
In one minute there were 3089 packets and 1172 were the Unknown listed above. The only thing that varies is the packet size.
The server has Win 2003 AS installed and Kerio as proxy/firewall. The modem/router is a 1421 telindus shdsl router.
The question: Is this traffic normal?? If not: How do I block/solve it?
Any help will be appreciated. Thanks in advance.
