[ILUG] Ping

[Keith Power]

But the way traceroute works, you'd have to let through UDP traffic. Better off to disallow ICMP traffic so scanners/Nimda etc have a 
harder job, and disallow any unnecessary UDP too (for example, Kate's nameserver allows ping which is probably unnecessary).

If someone outside does need to profile your network you can allow ICMP through for their IP.

Keith

>if you allow traceroute through there is less of a need for ping
>requests anyway... 
>
>G.
>
>___________________________
> Graham Smith,
> Network Administrator,
> Department of Computing,
> Institute of Technology,
> Tallaght, Dublin 24
> Phone: + 353 (01) 4042840
>
>-----Original Message-----
>From: Keith Power [mailto:power at cs.ucc.ie]
>Sent: 19 November 2001 16:45
>To: ilug at linux.ie
>Subject: Re: [ILUG] Ping
>
>
>A lot of people nowadays are not allowing ping traffic through their
>routers,
>since the spread of Nimda and the like which often ping the IP 
>neighbourhood of hosts they've infected. Maybe the router in your
>organisation has this set for your webserver.
>
>Keith
>
>>On Mon, Nov 19, 2001 at 01:16:36AM -0800, Michael Turley mentioned:
>>> anyone know what could stop ping from sending packets
>>> (or receiving returned packets) on a functioning web
>>> server? Firewall should not be the issue as other
>>> boxes (e.g. nameserver can ping through the firewall)?
>>> Any help would be appreciated!
>>
>> Some versions of ping try and do a DNS reverse lookup on the IPs.
>>
>> Try a "ping -n" instead. If that works, it's your DNS settings that
>>aren't working.
>>
>>Kate
>>
>>-- 
>>_______________________________________
>>John Looney             Chief Scientist
>>a n t e f a c t o     t: +353 1 8586004
>>www.antefacto.com     f: +353 1 8586014
>>
>>
>>-- 
>>Irish Linux Users' Group: ilug at linux.ie
>>http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
>>List maintainer: listmaster at linux.ie
>>
>>
>
>
>
>
>-- 
>Irish Linux Users' Group: ilug at linux.ie
>http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
>List maintainer: listmaster at linux.ie
>
>-- 
>Irish Linux Users' Group: ilug at linux.ie
>http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
>List maintainer: listmaster at linux.ie
>
>