Security Basics mailing list archives

Re: Removing ping/icmp from a network


From: "Ivan ." <ivanhec () gmail com>
Date: Wed, 26 Mar 2008 09:12:34 +1100

ICMP is vital and should not be blocked within the LAN. Blocking most
ICMP types for the Internet into the LAN, sure, but within the LAN is
should stay.

http://www.samag.com/documents/s=9365/sam0004i/0004i.htm

cheers
Ivan

On Wed, Mar 26, 2008 at 3:29 AM, Secure This <lists () securethis net> wrote:
I have a variety of clients with data centres who all make use of
 icmp/ping to monitor their servers/appliances/devices (often with poorly
 configured snmp versions 1 and 2).

 Could anybody kindly advise me of tools and strategies for minimising or
 removing the use of icmp/ping on a supposedly secure network?

 Thanks in advance



Current thread: