Best way to filter "Nachi pings"?

Colin Percival colin.percival at wadham.ox.ac.uk
Mon Oct 27 00:11:14 PST 2003


At 16:06 27/10/2003 +0800, Francis A. Vidal wrote:
>Wouldn't it break stuff like traceroute?

   Traceroute is fine -- it uses UDP packets.  Tracert, on the other hand, 
uses ICMP echo request packets, and it suffers.  I'm currently on a 
university network, and when there are connectivity issues (which seems to 
be quite often) I get very annoyed with the ICMP filtering.

Colin Percival




More information about the freebsd-security mailing list