Date: Sun, 16 Aug 1998 21:09:52 -0300 From: Joao Paulo Campello <john@neoplanos.com.br> To: security@FreeBSD.ORG Subject: hosts.deny/allow & ICMP Attacks Message-ID: <3.0.5.32.19980816210952.007c5b20@neoplanos.com.br> In-Reply-To: <199807281910.MAA01540@burka.rdy.com> References: <3.0.5.32.19980728000808.007cb4f0@neoplanos.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi all,
#1
Does anybody here know if there's any way to break hosts.deny/allow
protection in BSD or even Linux Systems?
#2
Is there any filter/firewall/thing I can do for blocking ICMP Attacks?
Like ICMP Type 8 (PING) or ICMP Type 3 (UNREACH) ?!?! Ooho, sorry... I know
I can use *ifpw* to filter these packets and not to respond the PING, for
example... But in this way my incoming link would be fully filled anyway...
So how can I filter in the router level, and be sure the PINGs will not
fill my incoming link?
Thnx for help,
Joćo Paulo Caldas Campello
Diretor Tecnico - Neo Planos Solution Provider
http://www.neoplanos.com.br/
IRCAdmin NetLink - Recife/PE (ICQ # ASK-ME :))
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3.0.5.32.19980816210952.007c5b20>