Re: Turn off PING server on AS/400

Well, the DOS attack only works (unless there is a bug in your computer's
TCP/IP stack) if the pinger can generate more traffic than your system has
bandwidth available.

Now, if theoretically I ever tried to crack a system, I wouldn't care about
ping.  You run a port scan against the IP address.  You can't block ports
that you have to legitimately have open.  So, blocking ICMP only stops the
lazy or stupid cracker.

----- Original Message ----- 
From: <rob@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, May 13, 2004 9:15 AM
Subject: Re: Turn off PING server on AS/400


> I think there's some bizarre way to perform a DOS attack by using pings.
> That's why some people block it.  But that could be a big WAG on my part.
>
> Rob Berendt
> -- 
> Group Dekko Services, LLC
> Dept 01.073
> PO Box 2000
> Dock 108
> 6928N 400E
> Kendallville, IN 46755
> http://www.dekko.com
>
>
>
>
>
> oliver.wenzel@xxxxxxxxxxxxxxxxxxxxxxx
> Sent by: midrange-l-bounces@xxxxxxxxxxxx
> 05/13/2004 01:41 AM
> Please respond to
> Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
>
>
> To
> Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> cc
>
> Subject
> Re: Turn off PING server on AS/400
>
>
>
>
>
>
> Hi,
>
> >I need to be able to have the AS/400 not respond to PINGs without
> shutting
> >down TCP/IP.
>
> what would be the use of this?
>
> Blocking ICMP messages in most cases is absolutely nonsense. When there is
>
> no
> reply to a ping, the sender will know that there *is* something there.
> Normally
> the router before the target will send a "destination unreachable" when
> there is
> no machine.
>
> Regards,
>
> Oliver
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.