Re: ICMP blocking on PIX .4.4.1

[Bill Pennington <billp () rocketcash com>]

I have the same issue. What I do is turn on ICMP when I need do
traceroutes or pings. Kinda inconvenient. I actually find I do not need
to perform a lot of traceroutes/pings when it requires a lot more effort
to do so :-)

phred () pacificwest com wrote:
> Yesterday our site underwent a Smurf attack which we quickly stopped by blocking ICMP traffic through the firewall.  
> I have a need to perform tracerouts from inside to the outside through the PIX firewall (v 4.4.1.)  Is there a way to 
> allow ping and traceroute from inside to outside and still defend against smurf like attacks?
>
> ----------------------------------------------------------------
> Get your free email from AltaVista at http://altavista.iname.com

-- 


Bill Pennington
Senior IT Manager
Rocketcash
billp () rocketcash com
http://www.rocketcash.com