Re: ICMP (Ping)

[andreas <entmoot () gmx de>]

On Tue Sep 02  03:19PM, Paul Kurczaba wrote:
> Are there any security issues for allowing a firewall/router to respond to
> Ping from the internet?
>
> -Paul Kurczaba

I don't know, if it was mentioned in one of the other replies, but there
is also a technique known to portscan hosts behind a firewall by
allowing icmp code 3 replies (Port unreachable) using a specially
crafted TTL field.

regards, andreas



---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------