On Dec 17, 2006, at 6:28 PM, Dag Richards wrote:
Jason Dixon wrote:
Your security staff is clueless. I bet they like to block icmp
echo- request too.
Erm, I am don't think I am clueless, often a sign of cluelessness I
am sure ... However. I block inbound icmp, well actually inbound
anything not shown to be required for specific 'services'.
What about this is cluelez? I ask in a tone not of belligerence,
but a desire to be informed by my betters.
Why would you block icmp echo-request? What does that gain you in
terms of security?
--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net