Re: ICMP (was: daily internet traffic report)

[Barrie Dempster <barrie () reboot-robot net>]

On Sun, 2004-10-17 at 16:35 -0600, James Edwards wrote:
> That is great till you want to run a server behind that firewall.
<snip>

If the server is behind the firewall the firewall will be aware of the
connection passing through and will therefore regard the packets as
legitimate.

I agree with you though blocking ICMP isn't much towards security
although as said before if we block everything and whitelist we are
closer to a secure system.
(The whitelist here being, RELATED connections)

-- 
Barrie Dempster (zeedo) - Fortiter et Strenue

  http://www.bsrf.org.uk

[ gpg --recv-keys --keyserver www.keyserver.net 0x96025FD0 ]

Attachment: signature.asc
Description: This is a digitally signed message part