RE: [FW1] Blocking ICMP

[Steve Moran]

That's no reason to not take away the obvious tools.  While removing ICMP from the hacker tool-kit doesn't make you safe, you should try to take as many tools away as possible.   -----Original Message----- From: Steven Schuster [mailto:[EMAIL PROTECTED]] Sent: Monday, June 11, 2001 8:00 AM To: '[EMAIL PROTECTED]'; Tony Wong; [EMAIL PROTECTED] Subject: RE: [FW1] Blocking ICMP Juan, I would have to disagree with that.  There are ways to run scans on machines that don't response to ping.  It makes the scan run longer, but it will look for any and all ports on all addresses within the range you set.   Steve Schuster Midwest ISO Security Analyst -----Original Message----- From: Juan Concepcion [mailto:[EMAIL PROTECTED]] Sent: Saturday, June 09, 2001 8:10 PM To: Tony Wong; [EMAIL PROTECTED] Subject: RE: [FW1] Blocking ICMP People can't attack what they can't see/detect.   Juan Concepcion Network Engineer/Security Consultant CCSA/CCSE E-Mail: [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tony Wong Sent: Friday, June 08, 2001 11:55 AM To: [EMAIL PROTECTED] Subject: [FW1] Blocking ICMP How does blocking ICMP make my firewall more secure?