On Tue, Jul 11, 2000 at 01:46:35PM +0800, Ronneil Camara wrote:
> > -----Original Message-----
> > From: Michael H. Warfield [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, July 11, 2000 1:15 PM
> > To: Ronneil Camara
> > Cc: [EMAIL PROTECTED]
> > Subject: Re: IP Spoofing
> >
> >
> > No-op. Port number is not generally applicable to ICMP. It's
> > a different protocol (same level as IP which also has no
> > concept of port
> > number either). Port numbers apply to TCP and UDP which are
> > a layer above.
> > I say generally because ICMP PORT_UNREACHABLE does have the concept of
> > a port, but that's a payload issue.
> So, since it's a layer 4 thing (tcp and udp), what does ICMP
> PORT_UNREACHABLE use, tcp or udp?
> And btw, what's the port number of this traffic?
Neither. It uses ICMP, that's all. It contains information
in additional fields about what protocols it's reporting on and what
parameters it's reporting on.
> > > I didn't get your last paragraph. :-(
> >
> > In other words, discarding any other ICMP type and subtype is
> > advantageous (a win) to you. Throw anything else away.
> > Sorry for being
> > obtuse in my language. :-)
> No problem, I love learning new figure of speech. :-)
> Thanks.
Mike
--
Michael H. Warfield | (770) 985-6132 | [EMAIL PROTECTED]
(The Mad Wizard) | (770) 331-2437 | http://www.wittsend.com/mhw/
NIC whois: MHW9 | An optimist believes we live in the best of all
PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it!
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
