Full Disclosure mailing list archives
Re: ICMP (was: daily internet traffic report)
From: Cedric Blancher <blancher () cartel-securite fr>
Date: Mon, 18 Oct 2004 08:14:05 +0200
Le lun 18/10/2004 à 00:35, James Edwards a écrit :
That is great till you want to run a server behind that firewall.
I don't see the reason why it would cause a problem, as firewall is able to spot ICMP related to server's IP connections as well...
The bigger picture, to me, is you gain little in security by blocking ICMP.
I agree there's a lot to do before bothering with ICMP errors filtering :) -- http://www.netexit.com/~sid/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
Hi! I'm your friendly neighbourhood signature virus. Copy me to your signature file and help me spread!
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: [SPAM] Your daily internet traffic report, (continued)
- Re: [SPAM] Your daily internet traffic report lee . e . rian (Oct 16)
- Re: [SPAM] Re: [SPAM] Your daily internet traffic report Hugo van der Kooij (Oct 17)
- Re: [SPAM] Your daily internet traffic report Dave Horsfall (Oct 17)
- Re: [SPAM] Your daily internet traffic report Michal Zalewski (Oct 17)
- Re: [SPAM] Your daily internet traffic report Gary E. Miller (Oct 17)
- Re: [SPAM] Re: [SPAM] Your daily internet traffic report Hugo van der Kooij (Oct 17)
- Re: [SPAM] Your daily internet traffic report lee . e . rian (Oct 16)
- ICMP (was: daily internet traffic report) Frank de Wit (Oct 17)
- Re: ICMP (was: daily internet traffic report) James Edwards (Oct 17)
- Re: ICMP (was: daily internet traffic report) Cedric Blancher (Oct 17)
- Re: ICMP (was: daily internet traffic report) James Edwards (Oct 17)
- Re: ICMP (was: daily internet traffic report) Cedric Blancher (Oct 17)
- Re: ICMP (was: daily internet traffic report) james edwards (Oct 18)
- Re: ICMP (was: daily internet traffic report) Cedric Blancher (Oct 18)
- Re: ICMP - Today India, Samoa, and Iran are in the tank - back to orginal thread DDoS, or No DDoS? vigilaro (Oct 18)