Best way to filter "Nachi pings"?

Brett Glass brett at lariat.org
Mon Oct 27 08:27:05 PST 2003


At 03:17 AM 10/27/2003, Jarkko Santala wrote:

>Blocking
>all ping packets to improve security is nothing more than security through
>obscurity. It may hide your system against the simplest ping probes, but
>it does nothing to improve security as such.

In our case, there's a more compelling reason.

Some of our customers' system administrators have utilities
which ping their servers from their home Internet connections
to make sure everything's working. If I were to block pings,
all of these guys' (and gals') pagers and cell phones would go 
off at once. I'd be beseiged with demands to remove the block 
immediately.

--Brett



More information about the freebsd-security mailing list