Re: [PATCH net-next v2] ipv4: Add support to disable icmp timestamp

2019-05-13 Thread Michal Kubecek
On Tue, May 14, 2019 at 10:56:54AM +0800, Weilong Chen wrote: > The remote host answers to an ICMP timestamp request. > This allows an attacker to know the time and date on your host. > > This path is an another way contrast to iptables rules: > iptables -A input -p icmp --icmp-type timestamp-requ

[PATCH net-next v2] ipv4: Add support to disable icmp timestamp

2019-05-13 Thread Weilong Chen
The remote host answers to an ICMP timestamp request. This allows an attacker to know the time and date on your host. This path is an another way contrast to iptables rules: iptables -A input -p icmp --icmp-type timestamp-request -j DROP iptables -A output -p icmp --icmp-type timestamp-reply -j DR

Re: [PATCH net-next v2] ipv4: Add support to disable icmp timestamp

2019-05-13 Thread David Miller
From: Weilong Chen Date: Mon, 13 May 2019 21:28:57 +0800 > The remote host answers to an ICMP timestamp request. > This allows an attacker to know the time and date on your host. > > This path is an another way contrast to iptables rules: > iptables -A input -p icmp --icmp-type timestamp-request

Re: [PATCH net-next v2] ipv4: Add support to disable icmp timestamp

2019-05-13 Thread Florian Westphal
Weilong Chen wrote: > The remote host answers to an ICMP timestamp request. > This allows an attacker to know the time and date on your host. No, it does not, I already told you so in V1 :-/ If you really think that its a problem that one can discover milliseconds-since-midnight please just chan

[PATCH net-next v2] ipv4: Add support to disable icmp timestamp

2019-05-13 Thread Weilong Chen
The remote host answers to an ICMP timestamp request. This allows an attacker to know the time and date on your host. This path is an another way contrast to iptables rules: iptables -A input -p icmp --icmp-type timestamp-request -j DROP iptables -A output -p icmp --icmp-type timestamp-reply -j DR