Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Firewall Wizards: Re: ICMP Packets.

Re: ICMP Packets.

From: Darren Reed <darrenr_at_reed.wattle.id.au>
Date: Wed, 3 Jun 1998 22:46:15 +1000 (EST)

In some email I received from tqbf_at_pobox.com, sie wrote:
[...]
> > 2) Is there a list of ICMP message types that are needed as opposed to
> ones that are just used for troubleshooting ( like echo, echo-reply )
> that can be blocked without problems.
>
> Not that I know of, but you should remember that for information gathering
> purposes, blocking ECHO REQUEST messages is a pretty futile gesture.
[...]

I'd second Perry's comments and mention that you're stopping PMTU from
working, for starters. Whatever is sending out IP packets should be able
to get the ICMP errors which are returned for those packets.

Darren
Received on Jun 03 1998

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]