full-disclosure - [SPAM] Re: [SPAM] Your daily internet traffic report

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: hvdkooij at vanderkooij.org (Hugo van der Kooij)
Subject: [SPAM] Re: [SPAM] Your daily internet traffic
 report

On Sat, 16 Oct 2004 lee.e.rian@...sus.gov wrote:

> > > Most routers will regard any ICMP request to them as a low priority
> issue.
> >
> > do they? icmp is not only about 'echo'. there's lot of
> > other functions via type/code - fragmentation, mtu etc,
> > vital for traffic signalization. administrators, who
> > blindly closes all icmp traffic are plain stupid idiots.
>
> Lots 'o flame but no light.
>
> How about sharing your knowledge of why certain icmp traffic should be
> allowed and the risks associated with allowing that traffic?

Just to name one: Path MTU discovery (RFC 1191)

   This memo describes a technique for dynamically discovering the
   maximum transmission unit (MTU) of an arbitrary internet path.  It
   specifies a small change to the way routers generate one type of ICMP
   message.

Hugo.

-- 
	I hate duplicates. Just reply to the relevant mailinglist.
	hvdkooij@...derkooij.org		http://hvdkooij.xs4all.nl/
		Don't meddle in the affairs of magicians,
		for they are subtle and quick to anger.