Full Disclosure mailing list archives
Re: [SPAM] Your daily internet traffic report
From: "Willem Koenings" <isec () europe com>
Date: Sun, 17 Oct 2004 11:52:49 -0500
are they? do you remember 'firewalking'?
sorry, but firewalking is not icmp-only technique and don't use full range of icmp types/codes. by firewalking you use tcp or udp packets (depends, which protocol acl you want to study) with one bigger TTL than target and monitor results via icmp type 11. if you really afraid firewalking, then instead of closing down all icmp you can close down only type 11. and nat firewall protects you from firewalking anyway. what i want to say? blindly closing down things is easiest thing to do. but doing so you are not on the top of the problem and you don't control things. get down to the problem and fix things. there's one too many black hole routers in the world and availability is also an security attribute. al the best, W. -- ___________________________________________________________ Sign-up for Ads Free at Mail.com http://promo.mail.com/adsfreejump.htm _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: [SPAM] Your daily internet traffic report Willem Koenings (Oct 16)
- Re: [SPAM] Re: [SPAM] Your daily internet traffic report Hugo van der Kooij (Oct 16)
- Re: [SPAM] Your daily internet traffic report Frank de Wit (Oct 17)
- <Possible follow-ups>
- Re: [SPAM] Your daily internet traffic report lee . e . rian (Oct 16)
- Re: [SPAM] Re: [SPAM] Your daily internet traffic report Hugo van der Kooij (Oct 17)
- Re: [SPAM] Your daily internet traffic report Dave Horsfall (Oct 17)
- Re: [SPAM] Your daily internet traffic report Michal Zalewski (Oct 17)
- Re: [SPAM] Your daily internet traffic report Gary E. Miller (Oct 17)
- Re: [SPAM] Re: [SPAM] Your daily internet traffic report Hugo van der Kooij (Oct 17)
- ICMP (was: daily internet traffic report) Frank de Wit (Oct 17)
- Re: ICMP (was: daily internet traffic report) James Edwards (Oct 17)
- Re: ICMP (was: daily internet traffic report) Cedric Blancher (Oct 17)
- Re: ICMP (was: daily internet traffic report) James Edwards (Oct 17)
- Re: ICMP (was: daily internet traffic report) Cedric Blancher (Oct 17)
- Re: ICMP (was: daily internet traffic report) james edwards (Oct 18)
- Re: ICMP (was: daily internet traffic report) Cedric Blancher (Oct 18)
- Re: ICMP - Today India, Samoa, and Iran are in the tank - back to orginal thread DDoS, or No DDoS? vigilaro (Oct 18)