Am Fr, den 05.03.2004 schrieb Jeff Vian um 01:46:
[ snip ]
> > All these are good layers that do add to your security. Refusing to
> > answer pings doesn't really add much, and just makes your server seem
> > rude. ;)
> >
> so by your definition, these hosts are rude???? (many more examples
> available)
>
> [jeff]$ ping www.mysql.com
> PING www.mysql.com (66.35.250.190) 56(84) bytes of data.
>
> --- www.mysql.com ping statistics ---
> 7 packets transmitted, 0 received, 100% packet loss, time 5999ms
>
> [jeff]$ ping www.redhat.com
> PING www.redhat.com (66.187.232.50) 56(84) bytes of data.
>
> --- www.redhat.com ping statistics ---
> 6 packets transmitted, 0 received, 100% packet loss, time 5018ms
Dropping ping requests is one thing, blocking ICMP in toto another one.
With above hosts other ICMP types than those used by ping work. :)
Alexander
--
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 1 (Yarrow) on Athlon CPU kernel 2.4.22-1.2174.nptl
Sirendipity 02:00:23 up 14 days, 3:34, load average: 0.45, 0.34, 0.30
[ ÎÎÏÎÎ Ï'ÎÏÏÎÎ - gnothi seauton ]
my life is a planetarium - and you are the stars
