Re: ICMP blocking

[Ken Connelly <Ken.Connelly () UNI EDU>]

Gary Dobbins wrote:
> Quick survey:  Who's blocking ICMP subsets (like echo requests,
> traceroutes) at their borders?  Who's not?  Strong feelings about why
> in either case?
We began blocking inbound echo requests when Nachi hit.  It didn't seem
to cause any significant problems, and has been largely left in place.
A few key addresses are allowed through the block, but most are still
denied.

- ken
> Certainly, doing so is not a huge security gain, but the alternative
> means you're giving away the map anonymously.
> How polar is the community on this?
>
> Thanks.