Security Basics mailing list archives

Re: Removing ping/icmp from a network


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Tue, 25 Mar 2008 18:32:48 +0100

On 2008-03-25 Secure This wrote:
I have a variety of clients with data centres who all make use of
icmp/ping to monitor their servers/appliances/devices (often with
poorly configured snmp versions 1 and 2).

Could anybody kindly advise me of tools and strategies for minimising
or removing the use of icmp/ping on a supposedly secure network?

Stop using IP. Not an option? Then you'll simply have to live with ICMP,
because it's a vital part of IP.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


Current thread: