Date: Sun, 24 Jun 2001 22:31:23 -0700 From: sean-freebsd-security@chittenden.org To: alexus <ml@db.nexgen.com> Cc: freebsd-security@freebsd.org Subject: Re: disable traceroute to my host Message-ID: <20010624223123.B44590@rand.tgd.net> In-Reply-To: <006101c0fd37$f93f7cd0$0100a8c0@alexus>; from "ml@db.nexgen.com" on Mon, Jun 25, 2001 at = 01:30:39AM References: <006a01c0fb6b$2d64d830$9865fea9@book> <3B36267B.5B5FDBE@inforta.com> <006101c0fd37$f93f7cd0$0100a8c0@alexus>
next in thread | previous in thread | raw e-mail | index | archive | help
--WYTEVAkct0FjGQmd
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
man traceroute
[snip]
-p Protocol specific. For UDP and TCP, sets the base
port number used in probes (default is 33434).
Traceroute hopes that nothing is listening on UDP
ports base to base + nhops - 1 at the destination
host (so an ICMP PORT_UNREACHABLE message will be
returned to terminate the route tracing). If some-
thing is listening on a port in the default range,
this option can be used to pick an unused port
range.
-sc
On Mon, Jun 25, 2001 at 01:30:39AM -0400, alexus wrote:
> Delivered-To: chittenden.org-sean-freebsd-security@chittenden.org
> Delivered-To: freebsd-security@freebsd.org
> From: "alexus" <ml@db.nexgen.com>
> To: "Simon Rakovec" <simon@inforta.com>,
> <freebsd-security@freebsd.org>
> Subject: Re: disable traceroute to my host
> Date: Mon, 25 Jun 2001 01:30:39 -0400
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2462.0000
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2462.0000
> List-ID: <freebsd-security.FreeBSD.ORG>
> List-Archive: <http://docs.freebsd.org/mail/>; (Web Archive)
> List-Help: <mailto:majordomo?subject=3Dhelp> (List Instructions)
> List-Subscribe: <mailto:majordomo?subject=3Dsubscribe%20freebsd-security>
> List-Unsubscribe: <mailto:majordomo?subject=3Dunsubscribe%20freebsd-secur=
ity>
> X-Loop: FreeBSD.org
> Precedence: bulk
>=20
> where did you get those numbers?
>=20
> ----- Original Message -----
> From: "Simon Rakovec" <simon@inforta.com>
> To: <freebsd-security@freebsd.org>
> Sent: Sunday, June 24, 2001 1:42 PM
> Subject: Re: disable traceroute to my host
>=20
>=20
> > Try this:
> >
> > ipfw add deny udp from any 32769-65535 to <your-host> 33434-33523
> >
> > Regards, Simon
> >
> > alexus wrote:
> > >
> > > is it possible to disable using ipfw so people won't be able to
> traceroute
> > > me?
> > >
> > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > with "unsubscribe freebsd-security" in the body of the message
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
> >
>=20
>=20
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
--=20
Sean Chittenden
--WYTEVAkct0FjGQmd
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Comment: Sean Chittenden <sean@chittenden.org>
iEYEARECAAYFAjs2zKoACgkQn09c7x7d+q2EiACfYRwTNthgkq3xu4JfDnEjrPNd
/0IAoIVZlpQobvez2B3dvDWyMAlmU6c+
=UqSu
-----END PGP SIGNATURE-----
--WYTEVAkct0FjGQmd--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010624223123.B44590>