I have a host at 209.104.33.252 which Nessus (1.0.7a) claims responds to ICMP_MASQREQ.
It is a Solaris 8 host, and the following /dev/ip tuneables are set to zero, which disables them: ip_forwarding 0 ip_respond_to_echo_broadcast 0 ip_respond_to_directed_broadcasts 0 ip_respond_to_timestamp 0 ip_respond_to_timestamp_broadcast 0 ip_respond_to_address_mask_broadcast 0 ip_forward_src_routed 0 ip_send_redirects 0 ip_strict_dst_multhoming 0 You'll immediately notice that while there is a broadcast and non-broadcast instance of ip_respond_to_timestamp, there is no non-broadcast instance of ip_respond_to_address_mask. I'm wondering if that's why this host shows positive for ICMP_MASQREQ. Can someone confirm to me whether 209.104.33.252 responds to a ICMP_MASQREQ unicast? I do not know how to generate such a packet to test it myself. --- "The avalanche has already begun. It is too late for the pebbles to vote." -- Kosh
