I believe that most firewalls should block icmp.
-----Original Message-----
From: Sweeney, Patrick [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 31, 1999 10:17 AM
To: 'Sujeet Nayak'; [EMAIL PROTECTED]
Subject: RE: ICMP filtering
There are two dangers to allowing ICMP through the firewall that spring
immediately to mind.
The first is that you could subject yourself to Denial of Service (DoS)
attacks like the ping of death.
The second is you could give a cracker an avenue to discover topological
about your network. I don't consider that too much of a threat in my
environment since I make that information easily available internally anyway
but you may feel differently in your environment.
I believe Axent Raptor firewall blocks ICMP.
-----Original Message-----
From: Sujeet Nayak [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 31, 1999 8:31 AM
To: [EMAIL PROTECTED]
Subject: ICMP filtering
Hi,
I see that most of the firewalls pass ICMP messages without filtering. Some
of them offer filtering option only for the PING message. Does anybody know
the firewalls that deny ICMP messages? Btw, is there any harm if I buy a
firewall that allows all the ICMP packets to go through into and out of the
private network.
Thanks
Sujeet
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
