• March 28, 2024, 08:45:58 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Blocked outgoing ICMP packet  (Read 13798 times)

ark

  • Level 1 Member
  • *
  • Posts: 6
Blocked outgoing ICMP packet
« on: March 11, 2014, 06:33:04 AM »

I'm on a DIR-655 A4 with 1.37EU firmware.

Connections are wired.

I did a factory reset after upgrading firmware recently.

Router was working before update. Old firmware was the same as when I bought the router a few years ago. Can't remember the actual version number.

Have a cable connection (10/10 mbit) to the internet.


The problem is that the router has been very unstable since the upgrade. It goes down maybe 1-4 times a day and requires a restart to get going again.

When looking at the log I found huge amounts of this:

[INFO] Sun Mar 09 09:38:04 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 109.64.110.219
[INFO] Sun Mar 09 09:38:04 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 119.17.33.135
[INFO] Sun Mar 09 09:38:03 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 179.232.139.28
[INFO] Sun Mar 09 09:38:02 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 177.18.6.174
[INFO] Sun Mar 09 09:38:01 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 123.3.122.156
[INFO] Sun Mar 09 09:38:01 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 109.64.110.219
[INFO] Sun Mar 09 09:37:59 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 79.103.78.68
[INFO] Sun Mar 09 09:37:58 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 109.184.107.28
[INFO] Sun Mar 09 09:37:58 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 79.11.80.81
[INFO] Sun Mar 09 09:37:57 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 212.252.189.168
[INFO] Sun Mar 09 09:37:57 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 119.95.222.119
[INFO] Sun Mar 09 09:37:57 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 83.42.96.150
[INFO] Sun Mar 09 09:37:56 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 213.80.235.28
[INFO] Sun Mar 09 09:37:56 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 110.12.74.194
[INFO] Sun Mar 09 09:37:56 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 68.197.70.118
[INFO] Sun Mar 09 09:37:55 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 71.204.11.103
[INFO] Sun Mar 09 09:37:55 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 77.228.254.9
[INFO] Sun Mar 09 09:37:54 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 79.182.199.235
[INFO] Sun Mar 09 09:37:54 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 213.80.235.28
[INFO] Sun Mar 09 09:37:54 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 103.247.132.14
[INFO] Sun Mar 09 09:37:53 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 79.103.78.68
[INFO] Sun Mar 09 09:37:52 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 79.11.80.81
[INFO] Sun Mar 09 09:37:52 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 2.91.208.61
[INFO] Sun Mar 09 09:37:51 2014 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.1.198 to 212.252.189.168


192.168.1.198 is my VOIP adapter connected with DMZ to the rauter. I removed the VOIP adapter and all of a sudden everything is stable again. No downtime in several days.

When searching for this on the forum I found a few people with similar problems. In one case it was a PS3 generating the ICMP packets. Another was a NAS. They didn't seem to have the stability issues though. No real solution was presented in those threads.


Question 1: Why is router blocking this traffic from a DMZ?

Question 2: Is there any way to make DIR-655 ignore the ICMP-packets? I have tried the Enable WAN Ping Respond but no success.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Blocked outgoing ICMP packet
« Reply #1 on: March 11, 2014, 07:23:33 AM »

Link>Welcome!

  • What region are you located?

Internet Service Provider and Modem Configurations
  • What ISP Modem Mfr. and model # do you have?
  • Is ISP Modem/Service using Dynamic or Static WAN IP addressing?
  • Check ISP MTU requirements, Cable is usually 1500, DSL is around 1492 down to 1472. Call the ISP and ask. Link>Checking MTU Values
  • For DSL/PPPoE connections on the router, ensure that "Always ON" option is enabled.

Router and Wired Configurations
Some things to try: - Log into the routers web page at 192.168.0.1. Use IE, Opera or FF to manage the router. Besure to log into the Admin account on the router.
  • Turn off ALL QoS or Disable Traffic Shaping (DIR only) GameFuel (DGL only and if ON.) options, Advanced/QoS
  • Turn off Advanced DNS Services if you have this option under Setup/Internet/Manual or under Setup/PARENTAL CONTROL/Set to>None: Static IP or Obtain Automatically From ISP.
  • Enable Use Unicasting (compatibility for some ISP DHCP Servers) under Setup/Internet/Manual.
  • Turn off DNS Relay  under Setup/Networking. Link>Finding Faster DNS Addresses using Name Bench and input new DNS addresses under Setup/Internet/Manual.
  • Setup DHCP reserved IP addresses for all devices ON the router. Setup/Networking. This ensures each devices gets its own IP address when turned on and connected, eliminates IP address conflicts and helps in troubleshooting and maintain consistency for applications that need to connect as well as mapped drives.
  • Ensure devices are set to auto obtain an IP address.
  • If IPv6 is an option on the router, select Local Connection Only or Disable IPv6 options under Setup/IPv6.
  • Set Firewall settings to Endpoint Independent for TCP and UDP under Advanced/Firewall. Enable or Disable SPI to test.
  • Enable uPnP and Multi-cast Streaming under Advanced/Networking. Disable uPnP for testing Port Forwarding rules.
  • Turn off WISH, and WPS under Advanced.
  • WAN Port Speed set to Auto or specific speed? Some newer ISP modems support 1000Mb so manually setting to Gb speeds can be supported by the router. Advanced/Advanced Networking/WAN Port Speed
  • Set current Time Zone, Date and Time. Use an NTP Server feature. Tools/Time.

Do you have any other rules or filters set up for the VoIP device?
Give it a reserved IP address?

Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

ark

  • Level 1 Member
  • *
  • Posts: 6
Re: Blocked outgoing ICMP packet
« Reply #2 on: March 12, 2014, 05:00:40 AM »

My location is Sweden.

The WAN address is dynamic but hardly ever changes. Had the same for over a year now.

MTU=1500

Tried disabling Traffic Shaping but experienced problems with streaming video.

Unicasting enabled.


No other rules or filters for the VoIP.

VoIP is on a DHCP reserved IP address.

Despite having the VoIP adapter unplugged I had to restart the router once more since my last post. Before firmware update a restart was necessary perhaps every 6 to 12 months.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Blocked outgoing ICMP packet
« Reply #3 on: March 12, 2014, 07:05:23 AM »

Internet Service Provider and Modem Configurations
  • What ISP Modem Mfr. and model # do you have?

Set Firewall settings to Endpoint Independent for TCP and UDP under Advanced/Firewall. Enable or Disable SPI to test.[/list]
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

ark

  • Level 1 Member
  • *
  • Posts: 6
Re: Blocked outgoing ICMP packet
« Reply #4 on: March 13, 2014, 01:53:10 AM »

Have a WAN connection 10/10 mbit via ethernet RJ45 socket so no modem of any kind.

Have pretty much ruled out the VoIP adapter as the cause of the problem. Had to restart the router twice the last hour despite no VoIP adapter on the LAN side.

By setting endpoint filtering to endpoint independent and disabling SPI I guess I'm lowering the firewall to a bare minimum for my entire LAN. Is that gonna help with the blocked ICMP packets from the VoIP (which by the way was on DMZ) or with the instability of the router? It doesn't feel like a long term solution.

I'm thinking maybe the 1.37EU firmware can't handle the workload when down- and uploads is sometimes maxing out my 10mbit for several days in a row. The router gets pretty hot at times.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Blocked outgoing ICMP packet
« Reply #5 on: March 13, 2014, 06:50:07 AM »

One problem is that your Uplink is maxing out the maximum uplink on the router of 2Mb...
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

ark

  • Level 1 Member
  • *
  • Posts: 6
Re: Blocked outgoing ICMP packet
« Reply #6 on: March 13, 2014, 07:38:48 AM »

I'm not sure what you mean by maximum uplink of 2Mb...

According to smallnetbuilder.com DIR-655 A4 with FW 1.21 has a LAN-WAN throughput of 272 Mbps.

Things have worked perfectly for years with the same ISP and same connection speeds before the firmware upgrade to 1.37.

Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Blocked outgoing ICMP packet
« Reply #7 on: March 13, 2014, 07:41:44 AM »

Go to the QoS section on the router...Uncheck Auto Uplink then select the down menu for manual UPlink speed. The max you see there should be 2048....this applies to the automatic mode....I don't know if you can enter in any manual values with out it giving you a error message...you could try.

You could go back to the prior version and test...If you do, please follow this:
FW Update Process
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

ark

  • Level 1 Member
  • *
  • Posts: 6
Re: Blocked outgoing ICMP packet
« Reply #8 on: March 13, 2014, 09:04:00 AM »

Automatic Uplink Speed is On but  Measured Uplink Speed : Not Estimated.

Did a test at bredbandskollen.se (a site that measures internet connections). Got over 9 Mbit/s both ways.

Then I set the the manual Uplink speed to 2048 and same test as above capped the upload at 2Mbit/s. Guess I'll stick with the automatic setting. :)

I will try downgrading the FW to a earlier version. Any suggestions on what FW I should try? Anything I need to know when downgrading FW?
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Blocked outgoing ICMP packet
« Reply #9 on: March 13, 2014, 09:08:41 AM »

Try the next available version down from this one. You can't go back to v1.2x since you are at 1.3x now.

Follow the FW update process...factory reset, load file, factory reset then set up from scratch...disable all 3rd party security PC software and browser add-ons.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

ark

  • Level 1 Member
  • *
  • Posts: 6
Re: Blocked outgoing ICMP packet
« Reply #10 on: March 16, 2014, 11:32:40 AM »

I'm still on 1.37 but I think I've found the problem.

I found this thread:
http://forums.dlink.com/index.php?topic=57718.0
and the following:
http://forums.dlink.com/index.php?topic=11321.msg213975#msg213975

Did some of the suggested settings in my bittorrent client and also lowered the global maximum number of connections to 100 and 30 per torrent and things have been a lot more stable after that.

Thanks for all the help.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Blocked outgoing ICMP packet (RESOLVED)
« Reply #11 on: March 16, 2014, 12:07:11 PM »

Glad you got it working.

Enjoy.  ;)
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.