Bugtraq mailing list archives

ICMP filtering?


From: WIDNERM () hsdwl utc com (MICHAEL R. WIDNER)
Date: 27 Apr 1994 09:18:45 -0400 (EDT)


In a previous message ccdes () ccdes princeton nj us wrote
I know we are getting a cisco router, and I have a question for anyone -
what is the latest version of the router software I need to run to keep
fake ICMP packets from reaching my hosts?  I believe that this was a
somewhat recent upgrade by cisco, thus the presence of nuke.c or whatever
being used to annoy people.  

Is this true?  If so, I'd be interested to know how this is implemented
and also what software revision is required.  We use quite a few routers
here, some Cisco, some not.  I don't see how one could filter 'fake'
icmp destination unreachable messages without actually filtering all
real ones as well.

-Mike Widner



Current thread: