On Dec 17, 2006, at 11:03 PM, Dag Richards wrote:
Jason Dixon wrote:
On Dec 17, 2006, at 6:28 PM, Dag Richards wrote:
Erm, I am don't think I am clueless, often a sign of cluelessness
I am sure ... However. I block inbound icmp, well actually
inbound anything not shown to be required for specific 'services'.
What about this is cluelez? I ask in a tone not of
belligerence, but a desire to be informed by my betters.
Why would you block icmp echo-request? What does that gain you
in terms of security?
I block all inbound traffic to my networks not required for
operations.
You don't use icmp echo-request for your network operations? Do you
think you're gaining something by filtering ping on your firewall?
--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net