Technically, icmp doesn't use ports, but can be filtered via "types" and
"codes").  But your strategy is a good idea.

I'd do following if I had the choice:

1. block inbound echo requests (and other abused icmp traffic for that
matter... i.e "redirects") for the hosts/segment at the border router.
Or....
2. ... At the statefull firewall. Or.....
3. at the host using a personal firewall, or windows filtering

-----Original Message-----
From: Jose Manzano [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 22, 2002 9:04 AM
To: NT 2000 Discussions
Subject: RE: Ping Replies


Can't you just block the port IMCP request go through ... this way they can
ping but will not get replies.  
-----Original Message-----
From: Ed Esgro [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 22, 2002 11:30 AM
To: NT 2000 Discussions
Subject: RE: Ping Replies

Filter ICMP packets.

-----Original Message-----
From: Duane Boudreau [mailto:[EMAIL PROTECTED]] 
Sent: Friday, November 22, 2002 9:37 AM
To: NT 2000 Discussions
Subject: Ping Replies

Hi All,

Is there anyway to prevent Win2K server from replying to a ping,
specifically for an IP address?

Thanks,
Duane


------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%





*****This email and any files transmitted with it are confidential and
intended solely for the use of the addressee. If you have received this
email in error please notify [EMAIL PROTECTED] Any views or opinions
presented in this email are solely those of the author and do not
necessarily represent those of Stainsafe Inc. or any of its subsidiaries or
affiliates. The company accepts no liability for any damage caused by any
virus transmitted by this email.*****

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%





*****This email and any files transmitted with it are confidential and
intended solely for the use of the addressee. If you have received this
email in error please notify [EMAIL PROTECTED] Any views or opinions
presented in this email are solely those of the author and do not
necessarily represent those of Stainsafe Inc. or any of its subsidiaries or
affiliates. The company accepts no liability for any damage caused by any
virus transmitted by this email.*****

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to