From owner-freebsd-security@FreeBSD.ORG Mon Oct 27 00:22:30 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4F71516A4B3 for ; Mon, 27 Oct 2003 00:22:30 -0800 (PST) Received: from irc.dagupan.com (irc.dagupan.com [202.91.161.246]) by mx1.FreeBSD.org (Postfix) with ESMTP id 33E6843FAF for ; Mon, 27 Oct 2003 00:22:29 -0800 (PST) (envelope-from francisv-sender-21ebc3@irc.dagupan.com) Received: by irc.dagupan.com (Postfix, from userid 1022) id F0CF31DEBF8; Mon, 27 Oct 2003 16:22:27 +0800 (PHT) Received: from irc.dagupan.com (localhost [127.0.0.1]) by irc.dagupan.com (Postfix) with ESMTP id 031831DEBE2 for ; Mon, 27 Oct 2003 16:22:27 +0800 (PHT) Received: from hopper (hopper.dagupan.com [202.91.161.143]) by irc.dagupan.com (tmda-ofmipd) with ESMTP; Mon, 27 Oct 2003 16:22:26 +0800 (PHT) To: Date: Mon, 27 Oct 2003 16:22:22 +0800 X-Mailer: Microsoft Office Outlook, Build 11.0.5329 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Thread-Index: AcOcYeppTGEWPa6eQeids4L7rC3bTwAAXA+w In-Reply-To: <5.0.2.1.1.20031027080917.020dd378@popserver.sfu.ca> From: "Francis A. Vidal" Message-ID: <1067242946.66995.TMDA@irc.dagupan.com> X-Delivery-Agent: TMDA/0.80 (Determine) X-Spam-Status: No, hits=2.1 required=5.5 tests=AWL,BAYES_30,EMAIL_ATTRIBUTION,FORGED_MUA_OUTLOOK, FROM_HAS_MIXED_NUMS,IN_REP_TO,MISSING_OUTLOOK_NAME version=2.55 X-Spam-Level: ** X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) X-Sanitizer: Secured by Bitstop Network Services MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: RE: Best way to filter "Nachi pings"? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: "Francis A. Vidal" List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Oct 2003 08:22:30 -0000 It's also dependent on ICMP time exceeded. -----Original Message----- From: Colin Percival [mailto:colin.percival@wadham.ox.ac.uk] Sent: Monday, October 27, 2003 4:11 PM To: Francis A. Vidal; freebsd-security@freebsd.org Subject: RE: Best way to filter "Nachi pings"? At 16:06 27/10/2003 +0800, Francis A. Vidal wrote: >Wouldn't it break stuff like traceroute? Traceroute is fine -- it uses UDP packets. Tracert, on the other hand, uses ICMP echo request packets, and it suffers. I'm currently on a university network, and when there are connectivity issues (which seems to be quite often) I get very annoyed with the ICMP filtering. Colin Percival