Re: Ping

[lgoodbar@xxxxxxxxxxxxxxx (Loyd Goodbar)]

On ping:
Ping sends ICMP ECHO requests, and receives ICMP ECHO_REPLY packets from a
host. To be effective, a packet-filtering firewall would be needed to deny
outgoing ICMP ECHO_REPLY packets. Unfortunately, this deprives you of the
basic means of determining if a host is active.

Firewalls can block ICMP traffic, but your system would still be susceptible
to a port scan (i.e., is MYHOST:80 alive (HTTP)? MYHOST:23/21 (TELNET)?,
etc.).

What's the intention of doing this?

Loyd

On Thu, 11 Nov 1999 15:05:11 -0500, "R. Bruce Hoffman, Jr."
<rbruceh@attglobal.net> wrote:

>Offhand, I don't think that it is "turnoffable". I think it is part of the
>base protocol, like if TCP is up, then ping works, if TCP is broken, ping
>don't work. There is no entry in the service table for it so it is not on a
>port so you could turn it off. Additionally, since all the doc says to
>verify, ping, I would think my first statement is true.
>
>===========================================================
>R. Bruce Hoffman, Jr.
> -- IBM Certified AS/400 Professional System Administrator
> -- IBM Certified AS/400 Professional Network Administrator
>
>"The sum of all human knowledge is a fixed constant.
>    It's the population that keeps growing!"
>
>-----Original Message-----
>From: Evan Harris <spanner@ihug.co.nz>
>To: midrange-l@midrange.com <midrange-l@midrange.com>
>Date: Thursday, November 11, 1999 2:00 PM
>Subject: Ping
>
>
>>Hey guys
>>
>>does anyone know how to "turn off" PING, that is, suppress the response to
>>a remote host when a ping request is recieved ?
>>
>>It seemed to me that it would be somewhere in the remote filters stuff in
>>Oops Navigator but I couldn't find anything really meaningful describing
>>how to do this, or even if it's possible.
>>
>>Cheers
>>Evan Harris

--  
"Why, you can even hear yourself think." --Hobbes
"This is making me nervous. Let's go in." --Calvin
lgoodbar@watervalley.net  ICQ#504581  http://www.watervalley.net/users/lgoodbar/
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---