RE: Best way to filter "Nachi pings"?

From: Francis A. Vidal (francisv-sender-21ebc3_at_irc.dagupan.com)
Date: 10/27/03

  • Next message: Kris Kennaway: "Re: Best way to filter "Nachi pings"?" 
    To: <freebsd-security@freebsd.org>
Date: Mon, 27 Oct 2003 16:22:22 +0800

    It's also dependent on ICMP time exceeded.

    -----Original Message-----
    From: Colin Percival [mailto:colin.percival@wadham.ox.ac.uk]
    Sent: Monday, October 27, 2003 4:11 PM
    To: Francis A. Vidal; freebsd-security@freebsd.org
    Subject: RE: Best way to filter "Nachi pings"?

    At 16:06 27/10/2003 +0800, Francis A. Vidal wrote:
    >Wouldn't it break stuff like traceroute?

       Traceroute is fine -- it uses UDP packets. Tracert, on the other hand,
    uses ICMP echo request packets, and it suffers. I'm currently on a
    university network, and when there are connectivity issues (which seems to
    be quite often) I get very annoyed with the ICMP filtering.

    Colin Percival

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Kris Kennaway: "Re: Best way to filter "Nachi pings"?"

    Relevant Pages

    • ICMP filter on Router?
      ... I'm just starting to set up a firewall on my Linux box, ... I want to set up an ICMP filter, but can't do it using software, because ... I can construct basic TCP filters on the Router, ...
      (comp.security.firewalls)
    • Re: ICMP filter on Router?
      ... > I want to set up an ICMP filter, but can't do it using software, because ... > my router doesn't forward ICMP requests to ipchains. ... and setup what you need with iptables/ipchains on your linux box. ...
      (comp.security.firewalls)
    • Re: Can not ping the server
      ... Outbound filters to the adapter to allow Internet Control Message Protocol ... Please follow the steps to enable ICMP router to resolve the issue. ... Cannot Ping External Network Adapter After Configuring RRAS as a VPN Server ... Create a IP packet filter using the pre-defined "ICMP Ping Query" ...
      (microsoft.public.windows.server.sbs)
    • Re: blocking icmp protocol
      ... filter is the default table so -t filter is not needed, also this will drop all icmp from everywhere, which may not be what he wants. ... Do You Yahoo!? ... Mail has the best spam protection around ...
      (RedHat)
    • Re: blocking icmp protocol
      ... iptables -A INPUT -p icmp -j DROP ... filter is the default table so -t filter is not needed, ... drop all icmp from everywhere, which may not be what he wants. ... On Sun, 17 Dec 2006, Waleed Harbi wrote: ...
      (RedHat)