Security Basics mailing list archives
Re: Removing ping/icmp from a network
From: Secure This <lists () securethis net>
Date: Wed, 26 Mar 2008 12:13:03 +0000
Jon R. Kibler wrote:
Thanks Jon, I have plenty of ways of blocking ICMP, but I'm looking for ways of reducing it or working without it.Secure This wrote:I have a variety of clients with data centres who all make use of icmp/ping to monitor their servers/appliances/devices (often with poorly configured snmp versions 1 and 2).Could anybody kindly advise me of tools and strategies for minimising or removing the use of icmp/ping on a supposedly secure network?Thanks in advanceIf you have any switches with layer 3 capabilities, block all icmp trafficin ACLs. For example, from a Cisco 3750:
Many thanks.
Current thread:
- RE: Removing ping/icmp from a network, (continued)
- RE: Removing ping/icmp from a network Hopke, Greg (Mar 25)
- Re: Removing ping/icmp from a network Mark Owen (Mar 25)
- Message not available
- Re: Removing ping/icmp from a network Mark Owen (Mar 25)
- Re: Removing ping/icmp from a network Fabio Fagundes (Mar 25)
- RE: Removing ping/icmp from a network Ramsdell, Scott (Mar 26)
- Re: Removing ping/icmp from a network Ansgar -59cobalt- Wiechers (Mar 26)
- RE: Removing ping/icmp from a network Ramsdell, Scott (Mar 27)
- Re: Removing ping/icmp from a network Ansgar -59cobalt- Wiechers (Mar 27)
- Re: Removing ping/icmp from a network Mark Owen (Mar 25)
- RE: Removing ping/icmp from a network Hopke, Greg (Mar 25)
- Re: Removing ping/icmp from a network Secure This (Mar 26)
- DoD aproved disk wiping tool JP Vicente (Mar 27)
- RE: DoD aproved disk wiping tool Timmothy Lester (Mar 27)
- Re: DoD aproved disk wiping tool John Syers (Mar 27)
- Re: DoD aproved disk wiping tool postmaster (Mar 27)
- Re: DoD aproved disk wiping tool Tremaine Lea (Mar 27)