Educause Security Discussion mailing list archives

ICMP blocking


From: Gary Dobbins <dobbins () ND EDU>
Date: Wed, 6 Dec 2006 16:24:41 -0500

Quick survey:  Who's blocking ICMP subsets (like echo requests,
traceroutes) at their borders?  Who's not?  Strong feelings about why in
either case?

Certainly, doing so is not a huge security gain, but the alternative
means you're giving away the map anonymously.
How polar is the community on this?

Thanks.
--

  ------------------------------------------------------------
  Gary Dobbins, CISSP -- Director, Information Security
  University of Notre Dame, Office of Information Technologies

Current thread: