<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<STYLE type=text/css> <!--@import url(scrollbar.css); --></STYLE>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<STYLE> BLOCKQUOTE{margin-Top: 0px; margin-Bottom: 0px; margin-Left: 2em} body{FONT-SIZE:12.1pt; COLOR:#001; FONT-FAMILY:宋体,serif;} </STYLE>
<META name=GENERATOR content="MSHTML 8.00.7601.18969"><BASE
target=_blank></HEAD>
<BODY
style="LINE-HEIGHT: 1.3; BORDER-RIGHT-WIDTH: 0px; MARGIN: 12px; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
marginheight="0" marginwidth="0"><SPAN lang=EN-US><FONT color=#000000><FONT
face=Calibri>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN lang=EN-US><FONT
size=3>Hi,<?xml:namespace prefix = o ns =
"urn:schemas-microsoft-com:office:office"
/><o:p></o:p></FONT></SPAN></P></FONT></FONT></SPAN>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN lang=EN-US><FONT
size=3><FONT color=#000000><FONT face=Calibri>I followed The Guidance and tried
to configure openvswitch(OVS) service. I first created a bridge br-ex and then
added eth2 to the bridge. After that I set the IP of eth2 to 0.0.0.0 and then
reboot the system. However br-ex was not up when system launched. So I turned on
br-ex manually and then restart the network, but br-ex could not get ip from
dhcp server. Thus I used “dhclient br-ex” to manually acquire IP. Well till then
everything worked fine, but in the evening the Network Node was continuously
attacked by ICMP package. Iptraf showed the following
messages:<o:p></o:p></FONT></FONT></FONT></SPAN></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><o:p><FONT color=#000000
size=3 face=Calibri> </FONT></o:p></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP time excd (56 bytes) from 4.69.143.125
to 166.111.61.xx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host comm denied) (576
bytes) from 176.32.36.23 to 166.111.61.xxx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><SPAN
style="mso-spacerun: yes"> </SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host comm denied) (576
bytes) from 176.32.36.23 to 166.111.61.xx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host) (100 bytes) from
59.66.96.226 to 166.111.61.xx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP time excd (56 bytes) from 4.69.143.125
to 166.111.61.xx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><SPAN
style="mso-spacerun: yes"> </SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host comm denied) (576
bytes) from 176.32.36.23 to 166.111.61.xxx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><SPAN
style="mso-spacerun: yes"> </SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host comm denied) (576
bytes) from 176.32.36.23 to 166.111.61.xx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host) (100 bytes) from
59.66.96.226 to 166.111.61.x on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP time excd (56 bytes) from 4.69.143.125
to 166.111.61.63 on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><SPAN
style="mso-spacerun: yes"> </SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host comm denied) (576
bytes) from 176.32.36.23 to 166.111.61.xx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><SPAN
style="mso-spacerun: yes"> </SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host comm denied) (576
bytes) from 176.32.36.23 to 166.111.61.xxx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP dest unrch (host) (100 bytes) from
59.66.96.226 to 166.111.61.xx on eth2<SPAN
style="mso-spacerun: yes">
</SPAN><o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><I
style="mso-bidi-font-style: normal"><SPAN lang=EN-US><FONT size=3><FONT
color=#000000><FONT face=Calibri>x ICMP time excd (56 bytes) from 4.69.143.125
to 166.111.61.x on eth2<o:p></o:p></FONT></FONT></FONT></SPAN></I></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN lang=EN-US><o:p><FONT
color=#000000 size=3 face=Calibri> </FONT></o:p></SPAN></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN lang=EN-US><FONT
size=3><FONT color=#000000><FONT face=Calibri>My ip is none of the above ones.
The download speed in system monitor went up to 3m/s or even higher to 8m/s. I
tried to use iptables and ebtable to filter icmp packages and also set
icmp_echo_ignore_all to drop all icmp pacakges. But, unfortunately, nothing
works. As long as I deleted eth2 from br-ex or brought down br-ex, the network
went back normal.If you have any idea, please help me. I have been stuck here
for several days. Thank you very
much!!<o:p></o:p></FONT></FONT></FONT></SPAN></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN lang=EN-US><o:p><FONT
color=#000000 size=3 face=Calibri> </FONT></o:p></SPAN></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN lang=EN-US><FONT
size=3><FONT color=#000000><FONT
face=Calibri>Regards!<o:p></o:p></FONT></FONT></FONT></SPAN></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN lang=EN-US><FONT
size=3><FONT color=#000000><FONT
face=Calibri>hjh<o:p></o:p></FONT></FONT></FONT></SPAN></P><STATIONERY>
<DIV><FONT color=#000000 size=3 face=宋体></FONT> </DIV>
<DIV> </DIV>
<DIV align=left><FONT color=#c0c0c0 size=2
face=Verdana>2015-09-17</FONT></DIV><FONT size=2 face=Verdana>
<HR style="WIDTH: 122px; HEIGHT: 2px" id=SignNameHR align=left SIZE=2>
</FONT>
<DIV><FONT color=#c0c0c0 size=2 face=Verdana><SPAN
id=_FlashSignName>applyhhj</SPAN></FONT></DIV></STATIONERY></BODY></HTML>