RE: how to block ICMP tunneling?

[Kyle Starkey <KSTARKEY () altera com>]

I was under the impression that ICMP should be blocked coming from the
outside.  I can't think of any reason you would want some one from the
outside PINGing, TRACRTing or otherwise Probing your internal network for
active hosts.  IMHO you should simply block the entire proctocol from the
outside.

Just my .02
Kyle

-----Original Message-----
From: Razvan Peteanu [mailto:Razvan.Peteanu () srgsoftware com]
Sent: Friday, July 16, 1999 9:08 AM
To: 'firewall-wizards () nfr net'
Subject: how to block ICMP tunneling?


BO2K has the ability to use ICMP tunneling for its traffic so I'm interested
in what types of ICMP messages should be blocked to prevent this traffic.

Thanks,
Razvan