Date: Wed, 27 Jun 2001 11:14:26 -0400 From: "Peter Brezny" <peter@sysadmin-inc.com> To: "Peter Jeremy" <peter.jeremy@alcatel.com.au> Cc: <freebsd-security@freebsd.org> Subject: RE: disable traceroute to my host Message-ID: <NFBBKAEAALGGGFKINBLAMEFMCAAA.peter@sysadmin-inc.com> In-Reply-To: <20010627071504.P95583@gsmx07.alcatel.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
Peter, What is a good document to get more info on ICMP types? Thanks. Peter Brezny SysAdmin Services Inc. -----Original Message----- From: owner-freebsd-security@FreeBSD.ORG [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Peter Jeremy Sent: Tuesday, June 26, 2001 5:15 PM To: 3APA3A Cc: alexus; freebsd-security@FreeBSD.ORG Subject: Re: disable traceroute to my host On 2001-Jun-26 15:08:13 +0400, 3APA3A <3APA3A@SECURITY.NNOV.RU> wrote: >deny ICMP from (YOURNETWORK) to any icmptypes 0,3,11 out > >0 - to stop windows traceroute and ping >3 - to stop BSD-style traceroute >11 - to prevent intermediate router to reply traceroute Blocking ICMP type 3 will break Path-MTU discovery (which relies on type 3 code 4). Peter To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?NFBBKAEAALGGGFKINBLAMEFMCAAA.peter>