Re: ICMP timestamp request is allowed from arbitrary hosts

Ric,

See if this sheds any light on the issue:

Prevent hacker probing: Block bad ICMP messages
http://articles.techrepublic.com.com/5100-1035_11-5087087.html

My wireless home network blocks ICMP at the router's hardware firewall. There is no domain nor is anything administered remotely on the network. Your mileage *will* vary.


MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


RicNagy wrote:

Our IA staff is running network scans and this (ICMP timestamp request is allowed from arbitrary hosts) is one of the things we are taking a hit on. Now we know we're blocking ICMP at the numerous firewalls. The problem I believe is just internally due to a setting in the XP registry. We disable the Windows XP firewall as we dont have a need for it. However I'm guessing there is either a key that needs to be modified or created to rectify this so it stops showing up on scans. Most of the articles I read on this talk about blocking at your external firewalls which is what we are doing. This particular hit we are taking seems to be related possibly to Windows and/or the Windows XP firewall being disabled. We definitely do not want to enable the Windows XP firewall. I'm figuring there has to be a key within the registry to rectify this problem within the XP Operating System.
.

Relevant Pages

  • Re: ICMP timestamp request is allowed from arbitrary hosts
    ... There is no registry entry that specifically blocks individual ICMP types on ... enable the Windows Firewall on the XP machines and configure the rules to do ... Point is Windows XP has the ...
    (microsoft.public.windowsxp.security_admin)
  • OT: help with security question
    ... Unfortunately there is a windows box on my network which is running ... I was surprised when it reported an incoming ICMP packet by raising ... a dialog window asking if I wanted to make a firewall rule for the ... Norton's recommendation was to enable incoming ICMP for that host, ...
    (Debian-User)
  • Re: Anyone ditching their current firewall for SP2?
    ... for more information about the Windows XP firewall. ... "With the exception of some Internet Control Message Protocol (ICMP) ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Guide to secure installtion of IIS 5
    ... don't forget a well-configured firewall. ... Do not put the computer onto the network or the Internet until after the ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.inetserver.iis.security)
  • Re: Is secedit.exe left by a hacker?
    ... > tested on port 445. ... > I have a Linksys router that I use as a firewall to my ... Secedit.exe is the name of a legitimate Windows file, ... investigate the files on your computer - antivirus with the latest updates ...
    (microsoft.public.win2000.security)