Re: ICMP blocking on PIX .4.4.1

["R. DuFresne" <dufresne () sysinfo com>]

look at the tcp version of traceroute, and perhaps seekout hping2.

though you are going to want to restrict access to those tools...

Thanks,

Ron DuFresne

On Thu, 20 Apr 2000 phred () pacificwest com wrote:

> Yesterday our site underwent a Smurf attack which we quickly stopped by blocking ICMP traffic through the firewall.  
> I have a need to perform tracerouts from inside to the outside through the PIX firewall (v 4.4.1.)  Is there a way to 
> allow ping and traceroute from inside to outside and still defend against smurf like attacks?
>
> ----------------------------------------------------------------
> Get your free email from AltaVista at http://altavista.iname.com

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior consultant:  darkstar.sysinfo.com
                  http://darkstar.sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!