Security Basics mailing list archives
Re: ICMP (Ping)
From: "Jude Naidoo" <jude007 () jnaidoo fsnet co uk>
Date: Wed, 3 Sep 2003 09:08:47 +0100
Hi Paul Yes there are security issues. The aim is to make the firewall invisible to the internet. Also by allowing ICMP to the firewall from a totally untrusted domain, you open your firewall to DoS attacks, as well as the possibility of having your firewall compromised. You may want to read the following thread and find out a bit more :-) http://www.geocrawler.com/mail/thread.php3?subject=%5BFW1%5D+ICMP+Traffic+Security+Issues&list=98 Thanks Jude ----- Original Message ----- From: "Paul Kurczaba" <paul () myipis com> To: <security-basics () securityfocus com> Sent: Tuesday, September 02, 2003 8:19 PM Subject: ICMP (Ping)
Are there any security issues for allowing a firewall/router to respond to Ping from the internet? -Paul Kurczaba
--------------------------------------------------------------------------- Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world's premier technical IT security event. Modeled after the famous Black Hat event in Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors. Symantec is the Diamond sponsor. Early-bird registration ends September 6.Visit us: www.blackhat.com ----------------------------------------------------------------------------
Current thread:
- ICMP (Ping) Paul Kurczaba (Sep 02)
- Re: ICMP (Ping) freeasabird_13 (Sep 03)
- Re: ICMP (Ping) Ansgar Wiechers (Sep 04)
- Re: ICMP (Ping) freeasabird_13 (Sep 05)
- Re: ICMP (Ping) Ansgar Wiechers (Sep 05)
- Re: ICMP (Ping) Tomas Wolf (Sep 08)
- Re: ICMP (Ping) Tim Greer (Sep 08)
- Re: ICMP (Ping) Ansgar Wiechers (Sep 04)
- Re: ICMP (Ping) freeasabird_13 (Sep 03)
- <Possible follow-ups>
- Re: ICMP (Ping) Jay Woody (Sep 03)
- RE: ICMP (Ping) Stuart (Sep 04)
- RE: ICMP (Ping) Tony Kava (Sep 04)
- RE: ICMP (Ping) Jay Woody (Sep 04)
- RE: ICMP (Ping) SMiller (Sep 04)
- RE: ICMP (Ping) Tim Greer (Sep 04)
- RE: ICMP (Ping) Gerard Marshall Vignes (Sep 05)
- RE: ICMP (Ping) Tim Greer (Sep 04)