Re: Removing ping/icmp from a network

["Mark Owen" <mr.markowen () gmail com>]

On Tue, Mar 25, 2008 at 12:56 PM, Hopke, Greg <GHopke () libertymgt com> wrote:
> Is ICMP on a LAN insecure?
>
>  I could see lowing it through a firewall or from trusted to non-trusted.
>
>  Greg

Within a trusted LAN, it is completely secure.  As ICMP is handled
directly by the operating system, there have been a few exploits
discovered that can crash a box with a malicious ICMP packet.
However, discovered flaws are not only very old, but have been fixed
on just about every OS.  ICMP is a twenty year old protocol and is
very reliable and helpful.  I wouldn't allow untrust to trust ICMP
outside the firewall, but trust to trust and trust to untrust would be
just fine in most cases.


-- 
Mark Owen