From owner-freebsd-security  Wed Jun 27 22:17:38 2001
Delivered-To: freebsd-security@freebsd.org
Received: from hawk.mail.pas.earthlink.net (hawk.mail.pas.earthlink.net [207.217.120.22])
	by hub.freebsd.org (Postfix) with ESMTP id 151BA37B407
	for <freebsd-security@FreeBSD.ORG>; Wed, 27 Jun 2001 22:17:35 -0700 (PDT)
	(envelope-from cjc@earthlink.net)
Received: from blossom.cjclark.org (dialup-209.244.106.34.Dial1.SanJose1.Level3.net [209.244.106.34])
	by hawk.mail.pas.earthlink.net (EL-8_9_3_3/8.9.3) with ESMTP id WAA16697;
	Wed, 27 Jun 2001 22:17:23 -0700 (PDT)
Received: (from cjc@localhost)
	by blossom.cjclark.org (8.11.4/8.11.3) id f5S5Fha00910;
	Wed, 27 Jun 2001 22:15:43 -0700 (PDT)
	(envelope-from cjc)
Date: Wed, 27 Jun 2001 22:15:43 -0700
From: "Crist J. Clark" <cristjc@earthlink.net>
To: alexus <ml@db.nexgen.com>
Cc: Ryan Masse <mail@max-info.net>, freebsd-security@FreeBSD.ORG
Subject: Re: disable traceroute to my host
Message-ID: <20010627221543.A346@blossom.cjclark.org>
Reply-To: cjclark@alum.mit.edu
References: <006a01c0fb6b$2d64d830$9865fea9@book> <3B36267B.5B5FDBE@inforta.com> <20010625093731.A934@ringworld.oblivion.bg> <01ec01c0fdb1$6c9cada0$9865fea9@book> <20010626085804.E780@ringworld.oblivion.bg> <002701c0fe76$7530eab0$01000001@book> <003401c0fe93$a3f405e0$3200a8c0@Home> <001101c0ff3d$ca013aa0$01000001@book>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <001101c0ff3d$ca013aa0$01000001@book>; from ml@db.nexgen.com on Wed, Jun 27, 2001 at 03:17:21PM -0400
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Wed, Jun 27, 2001 at 03:17:21PM -0400, alexus wrote:
> sounds good.. although what is tcp there for?

You can traceroute with any protocol. TCP is just as easy as UDP.

As people keep saying over and over, there really is no way to stop
traceroutes without severely breaking things.

If you really want to stop traceroutes, pull the plug. Can this thread
die now?
-- 
Crist J. Clark                           cjclark@alum.mit.edu

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message