Hi,

On Wed, May 05, 2021 at 12:30:01PM +0200, Kurt Kayser wrote:
> I understand your point. But there is really no big effort to check if
> Port 873 is working:
> 
> <host>nc -zvw100 rpki.ripe.net 873
> Connection to rpki.ripe.net 873 port [tcp/rsync] succeeded!
> 
> Let's make a security comparison, if this is really a necessary feature?

So where exactly is the *security* drawback of permitting ICMP echo?

But yes, of course, we can all do tcpping instead - which is much
more likely to have an adverse effect on the actual service...

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279

Attachment: signature.asc
Description: PGP signature

Reply via email to