Re: List of "safe" ICMP types and codes

[Chris Keladis]

Be extra carefull what you do with time exceeded.

It can be used to give away detailed information about your internal network.

Also, dont discount the fact that some 'trojans' (i think it was trinoo) use ICMP
messages to communicate (from memory i think it was just ping/pongs, but i may be
wrong).




Regards,

Chris.

Greg Skafte wrote:

> 3 Desintation Unreachable and all its sub types
> 4 Source Quench and its subtypes
> 11 time exceeded
> 12 bad header

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]