Re: disable traceroute to my host

From: Crist J. Clark (cristjc@earthlink.net)
Date: 06/28/01


Date: Wed, 27 Jun 2001 22:15:43 -0700
From: "Crist J. Clark" <cristjc@earthlink.net>
To: alexus <ml@db.nexgen.com>

On Wed, Jun 27, 2001 at 03:17:21PM -0400, alexus wrote:
> sounds good.. although what is tcp there for?

You can traceroute with any protocol. TCP is just as easy as UDP.

As people keep saying over and over, there really is no way to stop
traceroutes without severely breaking things.

If you really want to stop traceroutes, pull the plug. Can this thread
die now?

-- 
Crist J. Clark                           cjclark@alum.mit.edu
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message


Relevant Pages

  • Re[2]: disable traceroute to my host
    ... TCP is just as easy as UDP. ... the third is just an informative message (like the second isn't ... kick in eye;) isn't RFC-compilant and what? ... > If you really want to stop traceroutes, ...
    (FreeBSD-Security)
  • Re: disable traceroute to my host
    ... did u get my post about blackhole? ... In the UDP instance, enabling blackhole behaviour turns off the sending ... The above would block *nix traceroutes using the udp method. ...
    (FreeBSD-Security)

Quantcast