From owner-freebsd-security Thu Aug 17 9:21: 2 2000 Delivered-To: freebsd-security@freebsd.org Received: from daemon.dnepr.net (mizi.dnepr.net [195.24.156.63]) by hub.freebsd.org (Postfix) with ESMTP id 3498637B7B7 for ; Thu, 17 Aug 2000 09:20:35 -0700 (PDT) Received: (from land@localhost) by daemon.dnepr.net (8.9.3/8.9.3) id TAA05749; Thu, 17 Aug 2000 19:19:57 +0300 (EEST) (envelope-from land) Date: Thu, 17 Aug 2000 19:19:57 +0300 From: Andrey Lakhno To: sthaug@nethelp.no Cc: security@freebsd.org Subject: Re: deny incoming icmp Message-ID: <20000817191957.A5618@daemon.dnepr.net> References: <200008171414.HAA02662@pau-amma.whistle.com> <57904.966523813@verdi.nethelp.no> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <57904.966523813@verdi.nethelp.no>; from sthaug@nethelp.no on Thu, Aug 17, 2000 at 16:50:13 +0200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi sthaug! On Thu, 17 Aug 2000, sthaug@nethelp.no wrote: > > >Traceroute uses ICMP types 0 (Echo Reply), 8 (Echo request) and 11 (TTL > > >expired) to determine the route to the host. > > > > That didn't seem quite right to me, so I looked (in > > /usr/src/contrib/traceroute/traceroute.c); there is a rather large > > comment block near the beginning of the file tagged > > > > * -- Van Jacobson (van@ee.lbl.gov) > > * Tue Dec 20 03:50:13 PST 1988 > > > > that explains how & why the program uses high-numbered UDP datagrams for > > the probes. It does rely on ICMP (time exceeded; ICMP type 11) for > > receiving notification from a router, though. > > The Microsoft implementation of traceroute uses ICMP instead of UDP > though... Where can I read about Microsoft implementation of traceroute ? Or could you explain in a few words how it works ? -- Best regards, Andrey To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message