Cisco Cisco Packet Data Gateway (PDG)
Usage Guidelines
Use this command to configure a threshold on the number of ICMP/ICMPv6 error messages sent by the
subscriber for a particular data flow. After the threshold is reached, it is assumed that the server is not reacting
properly to the error messages, and further downlink traffic to the subscriber on the unwanted flow is blocked.
subscriber for a particular data flow. After the threshold is reached, it is assumed that the server is not reacting
properly to the error messages, and further downlink traffic to the subscriber on the unwanted flow is blocked.
Some servers that run QChat ignore the ICMP/ICMPv6 error messages (Destination Port Unreachable and
Host Unreachable) from the mobiles. So the mobiles continue to receive unwanted UDP traffic from the QChat
servers, and their batteries get exhausted quickly.
Host Unreachable) from the mobiles. So the mobiles continue to receive unwanted UDP traffic from the QChat
servers, and their batteries get exhausted quickly.
Examples
The following command configures a threshold of 10 ICMP/ICMPv6 error messages:
firewall icmp-destination-unreachable-message-threshold 10 then-block-server
firewall icmp-destination-unreachable-message-threshold 10 then-block-server
Command Line Interface Reference, Modes E - F, StarOS Release 19
1691
Firewall-and-NAT Policy Configuration Mode Commands
firewall icmp-destination-unreachable-message-threshold