Questions about ICMP

[Sam Varshavchik]

Daniel B. Thurman writes:

> Craig White wrote:
> 
>>Sent: Wednesday, December 05, 2007 3:33 PM
>>To: For users of Fedora
>>Subject: Re: Questions about ICMP
>>
>>
>>On Wed, 2007-12-05 at 15:27 -0800, Daniel B. Thurman wrote:
>>> Should ICMP packets be allowed both over the
>>> Internet or should it be allowed to pass only in
>>> the local networks?
>>> 
>>> I have a firewall appliance and trying to make sure
>>> that I am being secured properly.
>>----
>>disabling icmp echo requests is a great feature for the ultra-paranoid
> 
> So... am I to read this as it is a good idea to disable all icmp
> requests?  I get a LOT of ICMP requests from the Internet probing
> at my ports, which are disabled.  This is a good idea?

As the man said: only if you're ultra-paranoid, and live in a perpetual fear 
of Internet boogey-men.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20071205/799473c4/attachment-0001.bin