Re: Constant Pinging
From: Tim Haynes (usenet-20030917_at_stirfried.vegetable.org.uk)
Date: 09/17/03
- Next message: Horst Knobloch: "Re: Can I configure my firewall to authenticate using passwords?"
- Previous message: Colossus: "Nmap and guarddog"
- In reply to: ynotssor: "Re: Constant Pinging"
- Next in thread: Tim Haynes: "Re: Constant Pinging"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 17 Sep 2003 09:41:00 +0100
"ynotssor" <"ynotssor"> writes:
> Well, that makes sense in terms of an ISP blocking pings that transit the
> network, which I suppose is the context of the topmost reference above.
>
> I can't see any reason why an indiviual customer shouldn't drop any
> unwelcomed pings though.
Agreed. There's no reason for anyone out there to be sending pings, whether
as some kind of "monitoring" or no - it's not welcome, and I'll quite
happily monitor my boxes *without* requiring a hole in the firewall.
The things you don't want to block are PTMU packets; they look like a small
sequence of icmp-echo requests, mostly around LEN=1500 with DF=1 and
normally follow an attempt of yours to contact the network previously.
~Tim
-- In a big country dreams stay with you |piglet@stirfried.vegetable.org.uk Like a lover's voice fires the mountainside |http://spodzone.org.uk/ Stay alive |
- Next message: Horst Knobloch: "Re: Can I configure my firewall to authenticate using passwords?"
- Previous message: Colossus: "Nmap and guarddog"
- In reply to: ynotssor: "Re: Constant Pinging"
- Next in thread: Tim Haynes: "Re: Constant Pinging"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|