I was forced to kill all ICMP Echo (they can still use traceroute) requests from my dial-up users to solve network issues related to the ICMP probing done by the Welchia worm. Even theough the ping packets don't fill the bandwidth, they somehow cause all the interfaces to bog down with slow responses even at around 50% utilization....
Just to clarify, traceroute (the Unix version) works with UDP packets to ports that will rarely ever have a service associated with them, whereas tracert (the Windows version) will use ICMP packets. So depending on the tool used, it may or may not work properly with ICMP disabled (some ping tools use TCP/IP ports, for example, rather than a standard ping packet).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
