Great Circle Associates Firewalls
(July 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: ICMP protection.
From: Michel Lavondes <lavondes @ tidtest . total . fr>
Date: Tue, 30 Jul 1996 12:00:28 +0100
To: Steve Lang <stevel @ wave . co . nz>
Cc: "firewalls @ GreatCircle . COM" <firewalls @ greatcircle . com>
In-reply-to: Your message of "Tue, 30 Jul 1996 17:56:29 +1200."

In message <2 .
 2 .
 32 .
 19960730055629 .
 00aa1250 @
 wave .
 co .
 nz>, Steve Lang writes:
> Hi.
> 
> I have been monitoring this list for a while now, and have a question
> with regards to ICMP, and the protection from them.
> 
> I am searching for information about protecting a network from 
> spurious icmp's, with specific reference to cisco access lists.
> 
> There is likely to be several references available, but I have
> yet to find them. Any pointers to more information would be
> appreciated.
> 
AFAIR, blocking (or letting through) all ICMPs from a given source
to a given destination has been around for a long time (since 9.1 ?).

I think that blocking specific ICMP types came out with either 10.3 or
11.x.

For further info, ask cisco @
 spot .
 colorado .
 edu or look at :
http://www.cisco.com/

HTH

Michel Lavondes (lavondes @
 tidtest .
 total .
 fr)
#include <disclaimer.h>
Governments are guilty until proved innocent

Indexed By Date Previous: This, hopefully, will kill the thread (was Re: unsolicited messages.)
From: Michel Lavondes <lavondes @ tidtest . total . fr>
Next: Technical Dictionary
From: "Moore, Mark" <Mark . Moore @ kp . ORG>
Indexed By Thread Previous: ICMP protection.
From: Steve Lang <stevel @ wave . co . nz>
Next: Re: ICMP protection.
From: Paul Ferguson <pferguso @ cisco . com>

Google
 
Search Internet Search www.greatcircle.com