Daniel B. Thurman writes:
Craig White wrote:Sent: Wednesday, December 05, 2007 3:33 PM To: For users of Fedora Subject: Re: Questions about ICMP On Wed, 2007-12-05 at 15:27 -0800, Daniel B. Thurman wrote:Should ICMP packets be allowed both over the Internet or should it be allowed to pass only in the local networks? I have a firewall appliance and trying to make sure that I am being secured properly.---- disabling icmp echo requests is a great feature for the ultra-paranoidSo... am I to read this as it is a good idea to disable all icmp requests? I get a LOT of ICMP requests from the Internet probing at my ports, which are disabled. This is a good idea?
As the man said: only if you're ultra-paranoid, and live in a perpetual fear of Internet boogey-men.
Attachment:
pgpJDHG3EAry3.pgp
Description: PGP signature