Best way to filter "Nachi pings"?
Colin Percival
colin.percival at wadham.ox.ac.uk
Mon Oct 27 00:11:14 PST 2003
At 16:06 27/10/2003 +0800, Francis A. Vidal wrote:
>Wouldn't it break stuff like traceroute?
Traceroute is fine -- it uses UDP packets. Tracert, on the other hand,
uses ICMP echo request packets, and it suffers. I'm currently on a
university network, and when there are connectivity issues (which seems to
be quite often) I get very annoyed with the ICMP filtering.
Colin Percival
More information about the freebsd-security
mailing list