Всім привіт! Виручайте. Така ситуація:
В мережі появився вірус який флудить на 208.43.143.144-static.reverse.softlayer.com
ні як не можу файерволом його закрити. Загружає внутрішній інтерфейс на 95Мб і відповідно тупить нет. Як за допомогою ipfw можна його закрити, якщо стандартні deny ip, deny icmp не працюють
ось вивід tcpdump
22:26:34.230439 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#198, length 1032
22:26:34.230536 IP 10.0.0.89 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#72, length 1032
22:26:34.230639 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#226, length 1032
22:26:34.230736 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#226, length 1032
22:26:34.230835 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#142, length 1032
22:26:34.230935 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#229, length 1032
22:26:34.230938 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#79, length 1032
22:26:34.231035 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#169, length 1032
22:26:34.231038 IP 10.0.0.10.27005 > 81.145.34.193.static.giga-dns.com.27136: UDP, length 23
22:26:34.231135 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#58, length 1032
22:26:34.231235 IP 10.0.0.89 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#232, length 1032
22:26:34.231335 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#171, length 1032
22:26:34.231434 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#67, length 1032
22:26:34.231534 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#38, length 1032
22:26:34.231635 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#189, length 1032
22:26:34.231638 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#207, length 1032
22:26:34.231671 IP 95.66.190.201.12776 > 10.0.0.10.50078: UDP, length 77
22:26:34.231735 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#62, length 1032
22:26:34.231835 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#241, length 1032
22:26:34.231838 IP 10.0.0.91.netbios-ns > 10.0.255.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
22:26:34.231934 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP address mask request, length 1032
22:26:34.232033 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#120, length 1032
22:26:34.232133 IP 10.0.0.89 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#102, length 1032
22:26:34.232234 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#118, length 1032
22:26:34.232333 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#209, length 1032
22:26:34.232434 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#162, length 1032
22:26:34.232436 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#202, length 1032
22:26:34.232533 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#212, length 1032
22:26:34.232632 IP 10.0.0.89 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#43, length 1032
22:26:34.232733 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#138, length 1032
22:26:34.232833 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#181, length 1032
22:26:34.232935 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#103, length 1032
22:26:34.233032 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#139, length 1032
22:26:34.233132 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#174, length 1032
22:26:34.233135 IP 10.0.0.89 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#181, length 1032
22:26:34.233232 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#203, length 1032
22:26:34.233332 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#158, length 1032
22:26:34.233431 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#203, length 1032
22:26:34.233532 IP 0.0.0.0 > 208.43.143.144-static.reverse.softlayer.com: ICMP type-#150, length 1032
????????????????????????????????????????????