If you allow ICMP traffic and say a bad guy writes a script to send a continous ping steam with large size packets, that could amount to a DoS and flood the bandwidth.
-----Original Message----- From: Omar Koudsi [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 08, 2001 5:30 PM To: eko yulianto; [EMAIL PROTECTED] Subject: RE: securing icmp protocol IMHO, ICMP traffic in nature isn't secure. Your best bet would be to block at your firewall, that's if you are talking about securing ICMP traffic from the internet. ----------- Omar Koudsi IT Architect Network Security Center Special Systems Company http://security.sscjo.com [EMAIL PROTECTED] Tel: (9626) 5664221 Fax: (9626) 5681557 -----Original Message----- From: eko yulianto [mailto:[EMAIL PROTECTED]] Sent: Tue, November 06, 2001 4:22 AM To: [EMAIL PROTECTED] Subject: securing icmp protocol Hello, Is there anyone can telling me how to make icmp traffic secure? because I thought if I disallowed all icmp traffic in my network I will get headache if I have to checking connection when the network problem occur, thank's. Eko Yulianto IT Security Menara Asia 3rd Floor Diponegoro 101, Lippo Karawaci Tangerang, Indonesia Phone: +62.21.5460666 ext.5335 Fax: +62.21.5460660 Post Office: 15810 E-mail:[EMAIL PROTECTED]