AW: ICMP (Ping)

[Meidinger Chris <chris.meidinger () badenit de>]

Yes. It is a Bad Idea, with a big Bee and a big Eye.

You don't (normally) want people to be able to enumerate your firewall.
You can decide yourself whether the internal hosts should respond to pings,
but the firewall certainly should not.

-Chris Meidinger

-----Ursprüngliche Nachricht-----
Von: Paul Kurczaba [mailto:paul () myipis com] 
Gesendet: Dienstag, 2. September 2003 21:20
An: security-basics () securityfocus com
Betreff: ICMP (Ping)


Are there any security issues for allowing a firewall/router to respond to
Ping from the internet?

-Paul Kurczaba

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
technical IT security event.  Modeled after the famous Black Hat event in
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------