Re: Removing ping/icmp from a network

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2008-03-27 Michael Painter wrote:
> I'm not sure what 'clean' means, but I'm not supposed to see 10/8
> addresses on the "Internet".

You aren't seeing them "on the Internet".

   Source host
       |
    Router (206.126.0.5)
       |
    Router (66.135.224.201)
       |
       :
       :
       |
    Router (63.237.224.30)
       |                    <-- packet entering Microsoft's network
    Router (207.46.36.249)  
       |
       :
       :
       |
    Router (207.46.34.38)   <-- Router doing NAT
       |                    <-- packet entering private network
    Router (10.22.0.26)
       |
       :
       :
       |
 Destination host

Traceroute reports the IP addresses of the "en-route" hosts the packets
traverse. That may include private IP addresses.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq