PDA

View Full Version : Kerio 2.1.5 blocking connection


djg05
September 1st, 2005, 10:49 AM
I have started having problems with Kerio 2.1.5 blocking my connection to my bank and also to a ADSL speed test I use

http://www.adslguide.org.uk/tools/speedtest.asp

I have enabled all the alert boxes for blocked rules and the one that is popping up is

01/Sep/2005 15:35:55 Incoming ICMP blocked; In ICMP [3] Destination Unreachable; 192.168.***.***->localhost; Owner: Tcpip Kernel Driver

Firstly should this be allowed and secondly I don't why this should start happening out of the blue.

Thoughts appreciated please

ice60
September 1st, 2005, 11:13 AM
ICMP 3 should be safe to have set to allow in and blocked out. your rules will work 90% of the time if you had icmp 3 blocked in, so maybe that's how you always had it and you have only just run into a site that needs it ???

the speed test uses Java, maybe you have disabled it recently.

djg05
September 1st, 2005, 12:23 PM
-{ Quote: "ICMP 3 should be safe to have set to allow in and blocked out. your rules will work 90% of the time if you had icmp 3 blocked in, so maybe that's how you always had it and you have only just run into a site that needs it ???

the speed test uses Java, maybe you have disabled it recently." }-

Thanks - that is good to know.

Java is enabled. That test will not even load without it.

I have set that rule to accept ICMP 3 and seems to have resolved the problem. Appreciate the advice.

iceni60
September 1st, 2005, 12:42 PM
-{ Quote: "Thanks - that is good to know.

Java is enabled. That test will not even load without it.

I have set that rule to accept ICMP 3 and seems to have resolved the problem. Appreciate the advice." }-
no problem.

i get this error when i do the test -
"** An error has occurred while testing **
Unable to connect, please try again later.
Speed test stopped."

i think, this test and allowing icmp3 in, are definately two separte problems

djg05
September 1st, 2005, 02:32 PM
-{ Quote: "no problem.

i get this error when i do the test -
"** An error has occurred while testing **
Unable to connect, please try again later.
Speed test stopped."

i think, this test and allowing icmp3 in, are definately two separte problems" }-

That is the error I was getting and on the bank I was getting timeout errors. For the time being at least your solution has cured both. Maybe I will be back tomorrow with problems <g>