Security Basics: RE: ICMP (Ping)

["Aditya" <adityald3 () gmx net>]

icmp should all be disabled unless you need icmp redirect and other dangerous icmp types!

Aditya Lalit Deshmukh
Enterprise Security Solutions
aditya () online nailed org 


-----Original Message-----
From: segmentation fault [mailto:drfrank () hackermail com]
Sent: Thursday, September 04, 2003 11:11 PM
To: security-basics () securityfocus com
Subject: RE: ICMP (Ping)


it is my understanding that by blocking icmp, all udp ports will appear as open.  it should also be noted that the mtu 
path discovery will be affected as well http://alive.znep.com/~marcs/mtu/

i was told that if you want to stay invisible to pings (and combat the problems mentioned above) you should only block 
icmp packets of type 8.  i hope this helps!
-- 
_______________________________________________
Get your free email from http://www.hackermail.com

Powered by Outblaze

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------


________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------