Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 17 Jan 1999 14:59:26 -0500 (EST)
From:      Snob Art Genre <benedict@echonyc.com>
To:        "N. N.M" <madrapour@hotmail.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Small Servers - ICMP Redirect
Message-ID:  <Pine.GSO.4.05.9901171458140.22702-100000@echonyc.com>
In-Reply-To: <19990117094320.20052.qmail@hotmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 17 Jan 1999, N. N.M wrote:

> 1) Might it be any problem in connectivity and services, if I block all 
> traffic to (TCP/UDP) Small servers like echo, chargen, .... on firewall?

Not a problem, go ahead.
 
> 2) About ICMP redirect messages, as I learned they could be used to make 
> our network disconnected and somthing. What's the way to prevent this 
> kind of attack? Does blocking this kind of ICMP on firewall and routers 
> cause any problem in connectivity and system behavior?

I would block these messages from entering my network, absolutely.


 Ben

"You have your mind on computers, it seems." 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.05.9901171458140.22702-100000>